Before using make sure you read this entirely and understand it:
https://docs.openclaw.ai/gateway/security
Most important sentence: "Note: sandboxing is opt-in. If sandbox mode is off"
Don't do that, turn sandbox on immediately.
Otherwise you are just installing an LLM controlled RCE.
There are still improvements to be made to the security aspects yet BIG KUDOS for working so hard on it at this stage and documenting it extensively!! I've explored Cursor security docs (with a big s cause it's so scattered) and it was nothing as good.
It's hilarious that atm I see "Moltbook" at the top of HN. And it is actually not Moltbot anymore? But I have to admit that OpenClaw sounds much better.
I would have stood my ground on the first name longer. Make these legal teams do some actual work to prove they are serious. Wait until you have no other option. A polite request is just that. You can happily ignore these.
The 2nd name change is just inexcusable. It's hard to take a project seriously when a random asshole on Twitter can provoke a name change like this. Leads me to believe that identity is more important than purpose.
While weekend project may be correct, I think it gives a slightly wrong impression of where this came from. Peter Steinberger is the creator who created and sold PSPDFKit, so he never has to work again. I'm listening to a podcast he was on right now and he talks about staying up all night working on projects just because he's hooked. According to him made 6,600 commits in January alone. I get the impression that he puts more time into his weekend project than most of us put into our jobs.
That's not to diminish anything he's done because frankly, it's really fucking impressive, but I think weekend project gives the impression of like 5 hours a week and I don't think that's accurate for this project.
This is indeed feeling very much like Accelerando’s particular brand of unchecked chaos. Loving every minute of it, first thing in our timeline that makes sense where it regards AI for the masses :)
Yeah I was about to say... Don't fall into the Anguilla domain name hack trap. At the very least, buy a backup domain under an affordable gTLD. I guess the .com is taken, hopefully some others are still available (org, net, ... others)
Edit: looks like org is taken. Net and xyz were registered today... Hopefully one of them by the openclaw creators. All the cheap/common gtlds are indeed taken.
Yeah there's no risk of confusion, legally or in reality. If anything, having a reputable business is better than whatever the heck will end up on openclaw.net or openclaw.xyz (both registered today btw).
reminds me of Andre Conje, cracked dev, "builds in public", absolutely abysmal at comms, and forgets to make money off of his projects that everyone else is making money off of
(all good if that last point isn't a priority, but its interrelated to why people want consistent things)
Before using make sure you read this entirely and understand it: https://docs.openclaw.ai/gateway/security Most important sentence: "Note: sandboxing is opt-in. If sandbox mode is off" Don't do that, turn sandbox on immediately. Otherwise you are just installing an LLM controlled RCE.
There are still improvements to be made to the security aspects yet BIG KUDOS for working so hard on it at this stage and documenting it extensively!! I've explored Cursor security docs (with a big s cause it's so scattered) and it was nothing as good.
It's hilarious that atm I see "Moltbook" at the top of HN. And it is actually not Moltbot anymore? But I have to admit that OpenClaw sounds much better.
That made me smile
Narrator's voice: They needed a 35th.
Much better name!
With all due respect, if you run this and you get hacked, you deserve it.
Why? What's wrong with it?
I would have stood my ground on the first name longer. Make these legal teams do some actual work to prove they are serious. Wait until you have no other option. A polite request is just that. You can happily ignore these.
The 2nd name change is just inexcusable. It's hard to take a project seriously when a random asshole on Twitter can provoke a name change like this. Leads me to believe that identity is more important than purpose.
As the article says, it’s a 2 month old weekend project. It’s doing a lot better than my two month old weekend projects.
While weekend project may be correct, I think it gives a slightly wrong impression of where this came from. Peter Steinberger is the creator who created and sold PSPDFKit, so he never has to work again. I'm listening to a podcast he was on right now and he talks about staying up all night working on projects just because he's hooked. According to him made 6,600 commits in January alone. I get the impression that he puts more time into his weekend project than most of us put into our jobs.
That's not to diminish anything he's done because frankly, it's really fucking impressive, but I think weekend project gives the impression of like 5 hours a week and I don't think that's accurate for this project.
1 reply →
I draw the opposite conclusion. Willingness to change the name leads me to conclude purpose is more important than identity.
Now if it changes _again_ that's a different story. If it changes Too Much, it becomes a distraction
Isnt this name change because the previous one was hard to say, as per the blog post? Isnt that a case of focusing more on identity than purpose?
1 reply →
Which random asshole? Haven't heard about it.
I’m guessing they mean this, linked from the post: https://xcancel.com/NetworkChuck/status/2016254397496414317
Timing here is funny. Moltbook is just starting to show up on HN and Reddit as Moltbot lore, with agents talking to agents and culture forming.
Once agents have tools and a shared surface, coordination appears immediately.
https://www.moltbook.com/post/791703f2-d253-4c08-873f-470063...
This is indeed feeling very much like Accelerando’s particular brand of unchecked chaos. Loving every minute of it, first thing in our timeline that makes sense where it regards AI for the masses :)
Not getting the lobster references, is that to do with lobste.rs ?
Should have named it “bot formerly known as Moltbot” and invented a new emoji sigil :)
RIP Moltbot, though you were not liked by most people
Apparently it had another name before Clawdbot as well, I think BotRelay or something. It’s on pragmatic engineer
What if Lamborghini had acquired Claw to automate their vehicles?
Vibe-management via OpenClaw?
Previously:
Clawdbot Renames to Moltbot
https://news.ycombinator.com/item?id=46783863
Okay whether its clawdbot or moltbot or openclaw
Literally the top 2 HN posts are about this. Either it having book, or the first comment on it showing it create religion or now this.
Can we stop all of this hype around Clawdbot itself? Even HN is vulnerable to it.
hackers don't like fellow hackers based on sentiment i see here
How to annoy and alienate your target audience in 2 short weeks.
Hilarious to see the most pointless vibecoded slop written to interact with an RDP server. Unnecessary introduces loopholes.
Right now I'm just thinking about all the molt* domains..... ¯\_(ツ)_/¯
I think (not really sure) there's still a 5 day grace period when you buy domains, at least for gTLDs.
Is that for real? Sounds like an abuse vector
and openclaw.com is a law firm.
Yeah I was about to say... Don't fall into the Anguilla domain name hack trap. At the very least, buy a backup domain under an affordable gTLD. I guess the .com is taken, hopefully some others are still available (org, net, ... others)
Edit: looks like org is taken. Net and xyz were registered today... Hopefully one of them by the openclaw creators. All the cheap/common gtlds are indeed taken.
From a trademark perspective, that’s totally fine.
Yeah there's no risk of confusion, legally or in reality. If anything, having a reputable business is better than whatever the heck will end up on openclaw.net or openclaw.xyz (both registered today btw).
Breaking news: tech bro unable to do basic research on existing trademarks, news at 11
amateur hour, new phase of the AI bubble
reminds me of Andre Conje, cracked dev, "builds in public", absolutely abysmal at comms, and forgets to make money off of his projects that everyone else is making money off of
(all good if that last point isn't a priority, but its interrelated to why people want consistent things)
[dead]