[mattlondon]

I think for me it is an agent that runs on some schedule, checks some sort of inbox (or not) and does things based on that. Optionally it has all of your credentials for email, PayPal, whatever so that it can do things on your behalf.

Basically cron-for-agents.

Before we had to go prompt an agent to do something right now but this allows them to be async, with more of a YOLO-outlook on permissions to use your creds, and a more permissive SI.

Not rocket science, but interesting.

[snovv_crash]

Cron would be for a polling model. You can also have an interrupts/events model that triggers it on incoming information (eg. new email, WhatsApp, incoming bank payments etc).

I still don't see a way this wouldn't end up with my bank balance being sent to somewhere I didn't want.

[bpicolo]

Don't give it write permissions?

You could easily make human approval workflows for this stuff, where humans need to take any interesting action at the recommendation of the bot.

[igravious]

> I still don't see a way

1) don't give it access to your bank

2) if you do give it access don't give it direct access (have direct access blocked off and indirect access 2FA to something physical you control and the bot does not have access to)

---

agreed or not?

---

think of it like this -- if you gave a human power to drain you bank balance but put in no provision to stop them doing just that would that personal advisor of yours be to blame or you?

[alexjplant]

I'd like to deploy it to trawl various communities that I frequent for interesting information and synthesize it for me... basically automate the goofing off that I do by reading about music gear. This way I stay apprised of the broader market and get the lowdown on new stuff without wading through pages of chaff. Financial market and tech news are also good candidates.

Of course this would be in a read-only fashion and it'd send summary messages via Signal or something. Not about to have this thing buy stuff or send messages for me.

[Barbing]

Could save a lot of time.

Over the long run, I imagine it summarizing lots of spam/slop in a way that obscures its spamminess[1]. Though what do I think, that I’ll still see red flags in text a few years from now if I stick to source material?

[1] Spent ten minutes on Nitter last week and the replies to OpenClaw threads consisted mostly of short, two sentence, lowercase summary reply tweets prepended with banal observations (‘whoa, …’). If you post that sliced bread was invented they’d fawn “it used to be you had to cut the bread yourself, but this? Game chan…”

[YeGoblynQueenne]

I think this is absolute madness. I disabled most of Windows' scheduled tasks because I don't want automation messing up my system, and now I'm supposed to let LLM agents go wild on my data?

That's just insane. Insanity.

Edit: I mean, it's hard to believe that people who consider themselves as being tech savvy (as I assume most HN users do, I mean it's "Hacker" news) are fine with that sort of thing. What is a personal computer? A machine that someone else administers and that you just log in to look at what they did? What's happening to computer nerds?

[wartywhoa23]

Bath salts. Ever seen an alpha-PVP user with eyes out of their orbits, sitting through the night in front of basically a random string generator, sending you snippets of its output and firehosing with monologues about how they're right at the verge of discovering an epically groundbreaking correlation in it?

That is what's happening to nerds right now. Some next-level mind-boggling psychosis-inducing shit has to do with it.

Either this or a completely different substance: AI propaganda.

[beAbU]

I find it's the same kind of "tech savvy" person who puts an amazon echo in every room.

[andoando]

Whats it got to do with being a nerd? Just a matter of risk aversity.

Personally I dont give a shit and its cool having this thing setup at home and being able to have it run whatever I want through text messages.

And it's not that hard to just run it in docker if you're so worried

[hamburglar]

The computer nerds understand how to isolate this stuff to mitigate the risk. I’m not in on openclaw just yet but I do know it’s got isolation options to run in a vm. I’m curious to see how they handle controls on “write” operations to everyday life.

I could see something like having a very isolated process that can, for example, send email, which the claw can invoke, but the isolated process has sanity controls such as human intervention or whitelists. And this isolated process could be LLM-driven also (so it could make more sophisticated decisions about “is this ok”) but never exposed to untrusted input.

[squidbeak]

> and now I'm supposed to let LLM agents go wild on my data?

Who is forcing you to do that?

The people you are amazed by know their own minds and understand the risks.

[socalgal2]

The idea that the majority of computer nerds are any more security conscious than the average normy has long been dispelled.

The run everything as root, they curl scripts, they npx typos, they give random internet apps "permission to act on your behalf" on repos millions of people depend on

[esseph]

> That's just insane. Insanity.

I feel the same way! Just watching on in horror lol

[altmanaltman]

Definitely interesting but i mean giving it all my credentials feels not right. Is there a safe way to do so?

[dlt713705]

In a VM or a separate host with access to specific credentials in a very limited purpose.

In any case, the data that will be provided to the agent must be considered compromised and/or having been leaked.

My 2 cents.

[isuckatcoding]

Ideally workflow would be some kind of Oauth with token expirations and some kind of mobile notification for refresh