David vonThenen (@davidvonthenen.com)

OpenClaw: The Viral AI Agent that Broke the Internet - Peter Steinberger | Lex Fridman Podcast #491 | David vonThenen I listened to the latest Lex Fridman Podcast episode: 𝐎𝐩𝐞𝐧𝐂𝐥𝐚𝐰: 𝐓𝐡𝐞 𝐕𝐢𝐫𝐚𝐥 𝐀𝐈 𝐀𝐠𝐞𝐧𝐭 𝐭𝐡𝐚𝐭 𝐁𝐫𝐨𝐤𝐞 𝐭𝐡𝐞 𝐈𝐧𝐭𝐞𝐫𝐧𝐞𝐭 𝐰𝐢𝐭𝐡 𝐏𝐞𝐭𝐞𝐫 𝐒𝐭𝐞𝐢𝐧𝐛𝐞𝐫𝐠𝐞𝐫. If you're building agents, it's worth a listen. OpenClaw has exploded on GitHub. But what stood out to me was this (time: 23:26): 𝐀𝐧𝐝 𝐭𝐡𝐞𝐧 𝐭𝐡𝐞 𝐚𝐠𝐞𝐧𝐭 𝐰𝐨𝐮𝐥𝐝 𝐣𝐮𝐬𝐭 𝐦𝐨𝐝𝐢𝐟𝐲 𝐢𝐭𝐬 𝐨𝐰𝐧 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞… 𝐈 𝐣𝐮𝐬𝐭 𝐛𝐮𝐢𝐥𝐭 𝐢𝐭… 𝐢𝐭 𝐣𝐮𝐬𝐭 𝐡𝐚𝐩𝐩𝐞𝐧𝐞𝐝. We're not talking about scripted automation anymore. We're talking about systems that change themselves. That's impressive. It's also a different level of power. Midway through, Lex raises the obvious issue (time: 52:50): 𝐏𝐫𝐨𝐦𝐩𝐭 𝐢𝐧𝐣𝐞𝐜𝐭𝐢𝐨𝐧 𝐢𝐬 𝐬𝐭𝐢𝐥𝐥 𝐚𝐧 𝐨𝐩𝐞𝐧 𝐩𝐫𝐨𝐛𝐥𝐞𝐦… 𝐭𝐡𝐞𝐫𝐞'𝐬 𝐬𝐨 𝐦𝐚𝐧𝐲 𝐩𝐨𝐬𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬… 𝐧𝐮𝐚𝐧𝐜𝐞𝐝 𝐚𝐭𝐭𝐚𝐜𝐤 𝐯𝐞𝐜𝐭𝐨𝐫𝐬. Peter talks about progress, like scanning skills with VirusTotal. That's good. But the bigger point remains. OpenClaw is a privileged automation runtime. Your risk is dominated by: 1️⃣ Credential exposure 2️⃣ Network exposure 3️⃣ Tool/skill supply chain 4️⃣ Prompt injection and social engineering You're basically giving a script sudo on your machine. Except now it improvises. Please see: https://bit.ly/4aFyXDn And hopefully, you read the docs and you aren't running this on your actual machine, but some isolated cloud instance, VM, etc. To run OpenClaw safely, Peter's advice is clear (time: 1:00:45): 𝐈𝐟 𝐲𝐨𝐮 𝐦𝐚𝐤𝐞 𝐬𝐮𝐫𝐞 𝐭𝐡𝐚𝐭 𝐲𝐨𝐮 𝐚𝐫𝐞 𝐭𝐡𝐞 𝐨𝐧𝐥𝐲 𝐩𝐞𝐫𝐬𝐨𝐧 𝐰𝐡𝐨 𝐭𝐚𝐥𝐤𝐬 𝐭𝐨 𝐢𝐭… 𝐢𝐧 𝐚 𝐩𝐫𝐢𝐯𝐚𝐭𝐞 𝐧𝐞𝐭𝐰𝐨𝐫𝐤… 𝐭𝐡𝐞 𝐫𝐢𝐬𝐤 𝐩𝐫𝐨𝐟𝐢𝐥𝐞 𝐟𝐚𝐥𝐥𝐬 𝐚𝐰𝐚𝐲. Isolation is the safe move. And here's my 2 cents... If you isolate OpenClaw or any AI assistant completely... no personal data, no real integrations, no privileged API keys... how useful is it really? An AI assistant only becomes valuable when it knows who you are and can act on your behalf. That requires access. And access creates risk. Without that, you have a cool demo. Not a production system. Not a 𝐬𝐚𝐟𝐞 AI assistant. I think it could be useful to perform long running tasks based on the knowledge contained within the LLM... those in the AI space with some know how, probably already have some equivalent of that. BUT, I have a feeling that with some of that OpenAI resource, a safe and production version might become a reality sooner rather than later. The episode is fascinating and very honest about both the power and the risks... and also some really really amazing piece of tech that is taking the internet by storm. Give it a listen (it's 3+ hours, but worth it): https://bit.ly/4c0iFra https://www.linkedin.com/posts/davidvonthenen_openclaw-the-viral-ai-agent-that-broke-the-activity-7430613199382818816-zQXB?utm_source=share&utm_medium=member_desktop&rcm=ACoAAADZAncBLJ8zZ5NjYxUGvPdarkQtPTioafU