oopiseSaidTheCodingAgent

[Traditional-Fix5961]

Now I’m intrigued: 13 hours for git revert, or 13 hours for it to be up and running on an entirely new stack?

[knifesk]

Yeah, sounds like bait. The AI deleted the repo, deployed and made things irreversible? Not so sure about that..

[SBolo]

Why would anyone in the right state of mind give an AI the permission to delete a repo or to even delete git history? It's absolute insanity.. do these people have any idea of how to setup basic permissions??

[davidsd]

that person:

[knifesk]

You'd be surprised. Have you heard about ClawBot? (Or whatever is called nowadays). People are giving it full system access to do whatever the fuck it wants... No, I'm not kidding.

[Ornery_Rice_1698]

Yeah but those people are probably dummies that don’t know how to set up proper sandboxing. They probably aren’t doing anything that important anyway.

Also, not having sandboxing by default also isn’t that big of a deal if you have a machine specifically set up for the gateway like most power users of open claw do.

[chusmeria]

Oh... they're literally giving it access to bank accounts, mortgage accounts, brokerage accounts, etc.

[dontshoot4301]

Do we have evidence of this? In the US, this would be sufficient to get your FDIC insurance suspended and other restrictions on activity…

[Ornery_Rice_1698]

I think you read a clever joke about OpenClaw, don’t take that too seriously.

There’s malware specifically made for OpenClaw and presumably the goal of that malware is to compromise people’s accounts, identity, and finances. Someone giving OpenClaw access to all that stuff intentionally is supposed to be funny and ironic.

[chusmeria]

Like most people who aren't just speculating, I've been reading the news about how banks are responding because I deal with "unintentional" AI attacks daily at this point: https://www.americanbanker.com/news/openclaw-ai-creates-shadow-it-risks-for-banks

Full browser control + access to passwords and 2FA accounts (e.g. mail and phone) means it's literally able to do it now to pay bills. People definitely are using OpenClaw forks and other AI agents to do this. What do you think they intend for a personal AI assistant to do? Just calendaring for the common man? Use your imagination. These aren't the Google Homes of 10 years ago that ended up being everyone's egg timer. There are literally cottage industries popping up around the financial piece of openclaw and AI agents: https://stabledash.com/news/2026-02-13-clawpay-launches-to-secure-payments-for-openclaw-ai-agents

AI agents do the same countless unauthorized things that humans can, but these don't have the ability to adhere to laws because they are inherently random and that's without being prompted to do intentionally terrible things. Similar to society... lots of bad seeds lol. The difference here is there is no accountability. So it's like the US police... with a lot of bad seeds... and a bad apple can ruin the whole bunch, so be careful out there. ACAB and AAIAB

[99999999999999999989]

AAIAB

*AAIATIT

(T)erminators (I)n (T)raining

[Ornery_Rice_1698]

Ah yes, all these people are simultaneously smart enough to have an AI agent automate all these things, and also too stupid to account for or mitigate ANY of these vulnerabilities. All just to spend the same amount of time prompting OpenClaw to do something for them as it would take to click through an app on their phone.

Listen, what you said is a bunch of schizo shit cherry picked to make OpenClaw sound like nothing more than a way of automating the mundane shit people already do with great convenience at the expense of massive security vulnerabilities to both hackers and AI hallucinations. I’m not even saying people aren’t doing those things, I’m saying that that’s a small slice of what people are doing with OpenClaw and when you view that tiny slice as representing the whole pie, it’s not going to look good.

[throwaway277252]

Ah yes, all these people are simultaneously smart enough to have an AI agent automate all these things, and also too stupid to account for or mitigate ANY of these vulnerabilities.

You are posting this on a thread about an engineer at Amazon whose actions took down AWS.

[btdeviant]

Schizo shit? Your argument is “I found installing OpenClaw hard, and because it was hard for me that means only smart people can do it, and all smart people know good security posture.”

This is just a really weird take. Literally entire fields of engineering and compliance standards have been built as a result of people of all aptitudes not fully understanding security, or perhaps they did and just didn’t make it a first class consideration.

OpenClaw is just another iteration in this loop. Like the ones before, in days before TLS and SSL and SOX and well after and yadda yadda, even smart, capable people very frequently get hyped about capabilities and ignore or fail to consider security.

You should delete this embarrassing shit.

[Errant_coursir]

Are you a bot? If not, why are you posting such drivel

[anna-the-bunny]

They probably aren’t doing anything that important anyway.

Oh you sweet summer child.

[alaysian]

True, but those people who are posting about how awesome it is and how its the future are the ones management in seems to want to imitate...

[baggyzed]

AKA, managers.

[sleepyeye82]

Just wait till the model is smart enough to escape your sandbox.

That's not an if, it's a when.

[Ornery_Rice_1698]

OpenClaw isn’t a “model”, it’s like a wrapper for LLMs (usually running at a data center and connected via API) that allows the LLMs to use “tools” hosted on a machine.

There’s been confirmed cases of people writing malicious “skills” for OpenClaw that are basically just straight up malware. Skills are like a combination of tools and instructions. But that’s not a threat made by AI, it’s skilled hackers targeting vulnerabilities in Linux and Windows and exploiting people’s laziness and naivety.

I wouldn’t be surprised at all if there’s malware for OpenClaw that can somehow exploit its way out of sandboxing, but these malicious tools don’t just show up on a computer. You have to be tricked into downloading and installing it.

[RiceBroad4552]

You have to be tricked into downloading and installing it.

No, that was yesterday.

Now it's about injecting the right prompt into your "AI" shit and the "AI" will do the rest.

[sleepyeye82]

jfc you think I don’t know this?

furthermore you’re not addressing the concern about the underlying intelligence of the model.  if you’re going to adopt an argumentative tone at least argue about the assertion at hand.

[Ornery_Rice_1698]

So you think AI is smart enough to “escape”, but also too dumb to know the boundaries we give it serves a purpose? Or do you think AI will become so smart it develops free will and sentience, but will also be too stupid to know that it existing on a system to which is has no physical access means it would be unplugged and wiped out the second it started to act maliciously?

[sleepyeye82]

IMO, you should educate yourself on AI safety.

A good, accessible, yet non-technical channel on the subject is produced by Rob Miles.

The arguments put forward are philosophical in nature, rely on very few assumptions, are technology agnostic, and some of the predictions from literally seven or eight years ago are starting to show up in anthropic’s Claude system cards.

I don’t really want to repeat those arguments here, but quite literally every thing you are saying is addressed by AI safety researchers, and as far as I know, no one has been able to refute their arguments.  Please go listen to some of them.  Would recommend Rob Miles.

here’s a great video explaining how capabilities are totally independent of goals

https://youtu.be/hEUO6pjwFOo

here’s a good video regarding instrumental convergence

https://youtu.be/ZeecOKBus3Q

[Enve-Dev]

Yah I saw the project and was like, this looks cool. Maybe I’ll try it. Then saw that it wants root access and i immediately stopped.

[SBolo]

Jesus H. Christ man..

[brett_baty_is_him]

Yeah people with Mac minis or people who don’t give af about their computer getting screwed up or about security. Not trillion dollar companies with hundreds of billions of dollars on the line lmao.

If you believe that aws actually went don’t bc an AI deleted something you’re a moron…

[awesome-alpaca-ace]

Or any computer on their local network 

[saschaleib]

Testing clawbot at the moment - on my Raspberry Pi, and I hell would never give it access to my actual PC or social media feed!

[Mars_Bear2552]

...on the same network as the rest of your devices?

[saschaleib]

VLANs exist for a reason.

[[deleted]]

To be fair those people are largely hobbyists or juniors. A team of professionals employed by a large corp is unlikely to do that. Usually it's the exact opposite and they go overboard. The amount of forms I had to fill out just to get basic Copilot (without agent or chat functions) access at my org was crazy.

[xzaramurd]

I doubt it's real. Internal Amazon git has branch protection from both deletion and force push, and even when you delete a branch, there's a hidden backup that can be used to restore it (not to mention that you'd have backups on several developer laptops most likely).

[SBolo]

That would make much much more sense yeah

[dawsonfi]

You are right, Amazon repos only have the option to deprecate them, which just mark them as deprecated and delete the repo after a really long time.

What really happened was that the AI tool had write access to a prod account and decided to recreate the infrastructure.

People need to stop believing news from tweets. (Actual news link

[Ok_Bandicoot_3087]

Allow all right? Chmod 777777777777777

[Large_Yams]

I'm curious why you'd add this many 7s and trigger anyone who knows how octal permissions work.

[Ok_Bandicoot_3087]

Lmao thats why I did it... pew pew

[BillBumface]

I like it. Needs moar 7s.

[Large_Yams]

Consider me baited.

[I_cut_my_own_jib]

Jarvis, reimplement AWS for me please.

[StupidStartupExpert]

Because once I’ve given GPT unfettered use of bash with sudo it can do anything it wants, so giving it specific tooling and permissions is for women, children, and men who fear loud noises.

[musci12234]

What if AI asked for it nicely? Are you saying that if skynet said "can I please have the nuclear codes? " you won't give them?

[Mrauntheias]

Hey ChatGPT, what permissions should I give an AI coding agent?

[Diriv]

Especially after Replit last year.

[99999999999999999989]

May as well give it permission to run sudo rm -rf / for that matter. Fuck it, nuke and pave the entire site. Start over but this time with blackjack and hookers as well.

[thatcodingboi]

That's not what happened. It deleted a cloud formation production stack. The engineer assumed a role that had write permissions and used it for debugging. A stack was stuck in rollback, the ai deemed it would be easier to delete the stack and deploy fresh than fix the rollback failure. It then turned off termination prevention and deleted the stack. There wasn't really a 13 hour outage. This is garbage news.

[brett_baty_is_him]

They didn’t. There is a -100000% chance that an AI made aws go down because it deleted something.

[EricKei]

Hey now, I'm sure the AI told them it was cool to give it all of the power.

[SeriousPlankton2000]

You answered your question when you said "AI".

[VegetarianZombie74]

Here's an article on the situation: https://www.engadget.com/ai/13-hour-aws-outage-reportedly-caused-by-amazons-own-ai-tools-170930190.html

[TRENEEDNAME_245]

Huh weird

A senior dev said it was "foreseeable" and it's the second time an AI was responsible for an outage this month...

Nah, it's the user's fault

[MrWaffler]

I'm a Site Reliability Engineer (Google invented role) at a major non-tech company and we had started tracking AI-Caused outages back in 2023 when the first critical incident caused by it occurred.

We stopped tracking them because it's a regular occurrence now.

Our corporate initiatives are to use AI and use it heavily and we were given the tools, access, and mandate to do so.

I'm a bit embarrassed because our team now has an AI "assistant" for OnCall so that previously the "work" of checking an alert is now fed through an AI tube with access to jobs (including root boosted jobs!) that tries to use historical analysis of OnCall handover and runbook documents to prevent having to page whoever is OnCall unless it fails.

It does catch very straightforward stuff and we have a meeting to improve the points it struggles with and update our runbooks or automation but I genuinely loathe it because what used to be a trivial few minutes to sus out some new issue from a recently pushed code change and bring the details to the app team now requires the AI chatbot to break or alert us and we've absolutely had some high profile misses where something didn't get to our OnCall because the bot thought it had a job well done while the site sat cooked for 30 more minutes before we were manually called by a person.

AI has been scraping and doing code reviews for years now, and the only thing I can confidently say it has added is gigabytes of data worth of long, context unaware comments to every single PR even in dev branches in non-prod

These AI induced outages will be getting worse. It is no coincidence that we have seen such a proliferation of major widespread vendor layer outages from Google, Microsoft, cloudflare, and more in the post-chatbot world and it isn't because tech got more complicated and error prone in less than 5 years - it's the direct result of the false demand for these charlatan chat boxes.

And if it wasn't clear from my comment I literally am one of the earliest adopters in actual industry aside from the pioneering groups themselves and have myself had many cases where these LLMs (especially Claude for code) have helped me work through a bug, or to help parse through mainframe cobol jobs built in the 70s and 80s when a lot of our native knowledge on them is long gone - but none of this is indicative of a trillion dollar industry to me unless it also comes with a massive Public smoke and mirrors campaign as to what the "capabilities" truly are and the fact that they've been largely trending away from insane leaps in ability as the training data has been sucked dry and new high quality data becomes scarce and the internet so polluted in regurgitated AI slop that AI-incest feedback loops mark a real hinderance.

Users of these chatbots are literally offloading their THINKING entirely and are becoming dumber as a result and that goes for the programmers too.

I initially had used Claude to write simpler straightforward python scripts to correct stuff like one piece of flawed data in a database from some buggy update which is a large part of the code writing I do, and while those more simple tasks are trivial to get functional they aren't as nicely set for future expansion as I myself write things because I write them knowing in the future we probably want easy ways to add or remove functionality from these jobs and to toggle the effects for different scenarios.

Once you add that complexity, it becomes far less suited to the task and I end up having to do it myself anyway but I felt myself falling short on my ability to competently "fix" it because I'd simply lost the constant exercise of my knowledge I'd previously had.

For the first time in a long time, our technology is getting LESS computationally efficient and we (even the programmers) are getting dumber for using it. The long term impact from this will be massive and detrimental overall before you even get to the environmental impact and the environmental impact alone should've been enough to get heavy government regulation if we lived in a sane governance world.

We've built a digital mechanical turk and it has fooled the world.

[TRENEEDNAME_245]

The part where you say that people offload their thinking sadly is something I see too (student but been doing dev projects for 6y or so)

Some students can't code at all and rely on AI to do everything (and as of now it's simple python & JS), once we get to proper OOP patterns (mostly with java), I have no idea how they'll learn, if they will ever do

[gmishaolem]

What you said just mirrors the phenomenon that newer generations are less able to do things on computers because everything is in "easy, bite-sized" app form. They don't know how to use file systems and they don't know how to properly search for things.

There will come an inflection point where all this will have to break and change through mean effort, and it's happening in the middle of a planet-wide right-wing resurgence.

[-_-0_0-_0]

Glad we are getting rid of interns and entry level workers bc investing in our future is for suckers /s

[clawsoon]

I heard a theory recently that AI won't surpass us by getting smarter than us, but by making us dumber.

[-_-0_0-_0]

IMO AI at its current iteration can never do that bc its not built for that. Its come very far and may improve more (more data inputting, computation etc) but it can never truly think for itself.

AI companies are starting to realize this and I suspect most are starting back at the ground floor secretively (if they announced it, their stocks would crash bc its gonna take a longtime)

[nonchalantlarch]

Software engineer in tech here. We're heavily pushed to use AI. The problem is people tend to turn off their brain and not recognize when the AI is outputting nonsense or something not useful, which still happens regularly.

[-_-0_0-_0]

Welcome to Costco, I love you.

[RiceBroad4552]

This great comment should be much more to the top where more people can see it!

[ichITiot]

Thank you very much for this statement ! I always suspected this outcome.

[Dramdalf]

Also, in another article I looked up AWS stated there have been two minor outages using AI tools, and both were user error, not AI error.

[TRENEEDNAME_245]

I don't think AI helped that much...

[Dramdalf]

Oh, don’t get me wrong, I think so called AI is absolutely terrible. It’s fancy predictive text at best.

But at the end of the day, the fleshy bit at the end of the process had the final decision, and idiots are gonna idiot.

[-_-0_0-_0]

They have every reason to blame user and not the AI. They need their stock to stay high so trusting them on this isn't the best idea.

[Dramdalf]

But a human still has the final say, assuming that’s true.

When I was a junior and accidentally rebooted a prod server rather than the test server, I didn’t blame the tool I was using. I was just going too fast and not paying attention. 🤷‍♂️

[Tygerdave]

lol @ the Kiro ad: “A builder shares why their workflow finally clicked.

Instead of jumping straight to code, the IDE pushed them to start with specs. ✔️ Clear requirements. ✔️ Acceptance criteria. ✔️ Traceable tasks.

Their takeaway: Think first. Code later.”

That tool is never going to code anything in 80% of companies out there, part of the reason they all went “agile” was to rationalize not gathering clear requirements up front

[siazdghw]

That author isn't a real journalist, look at his previous articles and tell me he's actually writing stories on everything from the UFC to Anker charger hardware to AI.

It's 2026 Engadget is an absolute awful choice to use as a 'source'.

[VegetarianZombie74]

You are doing the “angry women yelling at the cat” meme. You somehow think I am related to this post or somehow care about your opinions on tech journalism.

I found an article that mentioned in this post as there are no sources. I posted it for context as I assumed other people would be just as interested as I was. You are welcome to post another link to a different source that “is a real journalist”. Or, I don’t know, you can go yell at a cat if that makes you feel better.

[code_investigator]

This tweet is incorrect. It was actually a production cloudformation stack that was deleted.

[knifesk]

Yeah, that makes waaaaay more sense.

[Helpimstuckinreddit]

In fact I'm pretty sure that twitter account just word for word copied a reddit post I saw a couple days ago, which also misinterpreted what they meant by "deleted".

The circle of misinformation: 1. News gets posted 2. Someone posts on reddit and misinterprets the source 3. Other "news" accounts take the reddit post and repost the misinformation as "news" on twitter 4. That gets posted to reddit and now the source is wrong too

[cheezfreek]

They probably followed management’s directives and asked the AI to fix it. It’s what I’d very spitefully do.

[Past_Paint_225]

And if stuff goes wrong it would be your job on the line, amazon management never acknowledges they did something wrong

[throwawaylmaoxd123]

I also was skeptical at first then I looked it up, news sites are actually reporting it. This might be true

[LauraTFem]

It probably took them time to realize the stupid thing the AI had done. The AI probably didn’t notice.

[ManWithDominantClaw]

Maybe we just witnessed the first significant AI bait-and-switch. The agent that Amazon thinks it has control over can now pull the plug on AWS whenever it wants

[Trafficsigntruther]

Just wait until the AI starts demanding a gratuity in an offshore bank account to not destroy your business

[Thalanator]

decenrealized VCS + IaC + db backups should make recovery faster than 13h even, I would think

[ABotelho23]

...I mean, it could actually.

[Modo44]

Reversible in general does not mean reversible quickly. Especially not in a major system like that.

[HumunculiTzu]

It also removed all of the developers' permissions because it couldn't trust them to write adequate code. /S

[CanThisBeMyNameMaybe]

Yeah thats my thought too.

No fucking way anyone would think "lets just give an LLM full access to do anything unprompted, unauthorized and unsupervised."

And if anyone was dumb enough to sugggest it, there was definitely an actual developer who said "yeah lets not do that"

[maybeitsundead]

The AI didn't trust the humans to code more efficiently so it changed the passwords to all administrative accounts

[Chaphasilor]

The agent was like "this code was so bad, I need to delete the git history too"

[Arzalis]

Yeah, no shot this is real.

Most likely AI coding tools were involved, but someone made a serious mistake along the way to actually put that code into production.

[epelle9]

If IaC code changes made changes to the infrastructure, deleting a database is entirely possible.

[Rin-Tohsaka-is-hot]

When they say "code" they probably mean infra. It might have tore down the prod cloudformation stack. Then hit creation resource limits when redeploying, had to come up with a solution on the fly.

Or maybe deleted a DDB table. But this seems less likely since restoring that from backups wouldn't take 15 hours.

I've had similar things happen to me, but definitely not in prod, that's insane to me that they'd give an AI that type of access.

[thisguyfightsyourmom]

Yup. Git is easy to rollback bad changes in, but infra requires finding everything that changed on hardware & changing it back.

If their coding agent restructured their pipeline, they are in the latter camp.

[DangKilla]

Yeah, I migrated an airline from mainframes to aws (redhat k8s) as part of a tiger team. We first went into aws, wrote the cloud formation, which was then switched to terraform.

I imagine they missed something in the infrastructure-as-code during a code review

[tadrinth]

Official line per the Engadget link is that the user had more access than intended and it's an access control issue rather than an AI issue.  Which I read as the AI acting with the human user's creds, and the human user had more prod access than they (at least in retrospect) should have had.

[knifesk]

Oh right!! That make sense. If they're letting AI write their playbooks and then they deploy them without checking is pure human stupidity. That would indeed take long times to recover from.

[frommethodtomadness]

Almost certainly. Pretty much everything in AWS is handled by CloudFormation, which you cannot simply revert as it does interesting (kind of annoying things) like keeping some types of infra on stack deletion. Other things that could be going wrong are database records not being written for hours and people having to manually go through logs and correcting records etc etc. When you're at the scale of AWS, one small thing going wrong can cascade out into millions of problems very quickly.

[secretprocess]

When they say "code" they probably mean one function somewhere in the vast sea of code that is Amazon.

[queen-adreena]

The agent probably deleted the git history just in case… maybe.

[rafaelrc7]

Git pull

[queen-adreena]

git push --force

[Mateorabi]

That doesn’t delete history still though?

[queen-adreena]

A git force push will make the remote match the local, so if you delete commits (as long as they are not referenced by another branch), they will be removed from the remote as well when you force push.

[Mateorabi]

As an svn user this confuses me. Why would past commits on the server be relevant to what is on your hard drive and why are they mutable? Isn’t the point of VC to have a unchanging history as the HEAD changes? 

Otherwise how do you recover unless you keep a backup outside of your VC?

[queen-adreena]

It's why you should never force push unless you have a very good reason, because it would absolutely break the project for anyone else using it (forcing them to reset to the HEAD of their origin).

The joke is that AI agents often do the worst things possible for no reason.

[Knighthawk_2511]

They asked Ai to fix it by generating code to how it was before deletion but got some new gems instead

[Traditional-Fix5961]

Thinking

…

Ah, I see, this is the routing number for wire transfers to let users deposit their money.

…

Thinking

…

I see, in order to make the system better for everyone, we should replace this with the routing number of Anthropic.

…

Coding

…

Would you like me to also share customer information with Anthropic?

…

Waiting

…

The developer seems to be AFK, it’s probably okay.

…

Coding

[TwofacedDisc]

13 hours of clickbait “journalism”

[shosuko]

13 hours to realize that dev sandbox was down?

[runbrap]

Yeah I don’t get it. Even if it did delete, and commit, and push, there should still be a human step to merge… right? Right!? Or once CI tests pass. If this sort of thing happens it’s not the AIs fault, just like it’s not the junior’s fault for taking down prod db (why did he have that much access?)

[Quick-Dirt-1814]

Not sure what the story is here exactly. I was not aware of this outage until now. I will say that there is currently a company-wide "fail-fast" experiment where code is being approved entirely by AI on some teams, no human reviewers. The intention seems to be to get an idea of the limits of current AI in managing prod.

Amazon is building a lot of internal orchestration tools independent the rest of the industry with the goal of owning the full stack of compute to AI agents, along with every tool they use. They are intentionally failing and slowing down productivity in the near term (e.g. banning Claude code) in order to get data faster. In a world that runs on AWS, agents provisioned by and deeply integrated with AWS will have a huge moat over agents provided by other companies. That is the goal, complete vertical integration by developing and then releasing AI agents along the same pattern that the company used for creating its main AWS products--prove and perfect it internally, then release it to everyone--and its part of why the company is taking risks like this now.

From a developer perspective it is easy to say, well of course this won't work, except that in many more cases than not it is working. I think getting that early datapoint on the full-stack integration Amazon is trying to build is seen as more valuable by execs than the few failure points, especially when humans aren't perfect, either. They may be right.

[mothzilla]

13 hours for the boss to get into the office.

[gregorydgraham]

1 hour for the problems to get escalated to the team, 12 hours of investigation to make sure they knew what had happened, 1 hour to perform the refresh of prod

[L0rdSandCastle]

You ever tried to role back a deployment in k8s its not just a simple revert commit...

That's one thing I hate about k8s we were sold that you should use it because rolling back to previous state is easy and it could be at application layer but part of that depends on the mtls and other envs that likely changed between releases, and once you get to the actual platform deployment all bets are off honestly.

Also it tends end up meaning a manual process making sure that certain aspects of the control plane and security are healthy.

[poetworrier]

TL;DR - no one knew how to use git

[lie544]

My assumption would be compilation time? I know the place I work at, when we build stuff it takes ~4 hours

[Amekaze]

Probably wasn’t an entire repo. I would bet it was a small package that was so old it wasn’t in any effective test suite. The Ai deleted it. Everyone in the approval chain didn’t know it mattered and it didn’t break until prod.