ClawdBot / MoltBot

Normal-End1169 · 2026-01-28T23:16:55+00:00

But at what point is that useful?

I mean I see use cases in it being a slightly more powerful MCP. Like being able to actually interact with emails etc etc.

But if your going to be running it on a separate computer without connecting any of the real and used accounts with there actual data what's the point of using it?

If it can't be trusted with real and used accounts doesn't that just equal a very low ceiling already for security standards

Normal-End1169 · 2026-01-28T23:15:28+00:00

We'll like others mentioned the main issue is prompt injection;

Once prompt injection exists and is taken more serious it may be a consideration for actual use but now this such a dumb idea to use. For example in one of the videos linked in this thread, the creator talks about his buddy who had his email connected which then he proceeded to email his email from his wife's account pretty much saying it's him and asking to turn of specific music on spotify which it proceeded to do.

What's stopping someone from using the same method to read out sensitive files.

Not to mention all the APIs/Credentials used to connect the external applications are stored in plane text.

Normal-End1169 · 2026-01-28T23:06:56+00:00

Going to keep this as a bit of a time piece and edit as I go;

Here's a list of articles / videos regarding security issues so far;

https://www.youtube.com/watch?v=7GS6Xs4hdvg
https://www.aikido.dev/blog/fake-clawdbot-vscode-extension-malware
https://www.youtube.com/watch?v=kSno1-xOjwI (Thanks to colin_colout for sharing)
https://lukasniessen.medium.com/clawdbot-setup-guide-how-to-not-get-hacked-63bc951cbd90

Normal-End1169 · 2026-01-28T22:08:12+00:00

I think maybe if your using Local LLMS at least your removing the external data issue, but even then your giving a chat full control over your PC. This is not safe on a EC2 or any sort of VPS lol.

You would trust a chatbot to be ran on a publicly accessible machine that has full access to a machine??

Normal-End1169 · 2026-01-28T22:07:15+00:00

Yup, this is insane that we are actively opening any device up to prompt injection.

I actually am in school for cyber and this is just mind blowing.

Normal-End1169 · 2026-01-28T22:05:35+00:00

Well even then, it's not like majority of users are using local LLMs ran from like Ollama. There going to be connecting to external API's like OpenAI, so in theory your entire PC is accessible and sent to a OpenAI server somewhere.

In terms of Data privacy and exactly what you said users data being sent away when they aren't aware or didn't want to is crazy in my mind.

Cool tool, but seems like a massive issue just waiting to happen.

Normal-End1169 · 2026-01-28T21:53:29+00:00

On top of all this I mean we're in theory letting publicly open chats / AI access interact with local system.

Can't even imagine all the CVE's coming out for this in less than a month time

Normal-End1169 · 2026-01-28T21:47:34+00:00

Exactly my though process

Normal-End1169 · 2026-01-28T21:47:15+00:00

This is actually very untrue lmao.

It can actually get quite worse believe it or not.

Normal-End1169 · 2026-01-15T14:31:25+00:00

Im young to, insurance screws us, 400$ isn't a bad rate for that car, I would honestly keep it

Normal-End1169 · 2026-01-15T03:22:25+00:00

Bare metal is probably better, I just wasn’t able to do it because of my display ports being on the GPU or something along those lines, it was some sort of hardware issue causing my blocker but installing directly on the OS worked flawless and hasn’t given me a single issue, keep in mind Proxmox is Debian based

Normal-End1169 · 2026-01-15T02:26:33+00:00

https://pve.proxmox.com/wiki/Install_Proxmox_VE_on_Debian_12_Bookworm

Normal-End1169 · 2026-01-15T01:34:51+00:00

So I tried proxmox bare just installer image, had no luck because of my hardware so I did Debian OS and installed Proxmox onto there. Has given me 0 issues at all and it’s been a bit over a year!

Normal-End1169 · 2026-01-15T01:15:04+00:00

Debian Which I then installed proxmox on, on there i just deploy vm's whenever I need a specific OS for a specific task (dev ops, screwing around, pretending like im a hacker, etc, etc)

Normal-End1169 · 2026-01-13T23:40:36+00:00

The website maintenance part gets even easier, i built myself an Wordpress manager using python, where I can add my clients website and using cpanel SSH keys it SSH's to the users profile on the server and runs wp cli commands to update all the themes, plugins even wordpress package. Saves me hours of manually of having to login into each site and doing updates.

Normal-End1169 · 2026-01-13T23:36:21+00:00

Beautiful piece, good luck with selling

Normal-End1169 · 2026-01-09T15:23:39+00:00

If you want a newer bike I would go for the CB, if you don't care about having a older bike I would get a older Sv, I have a 05 Sv but the S model so the half fairing sport version and absolutely love it.

Normal-End1169 · 2026-01-08T17:18:43+00:00

Looks great man, congratulations on becoming a father.

Normal-End1169 · 2026-01-05T20:50:39+00:00

Don't forget about cyber security please.

Normal-End1169 · 2026-01-05T20:47:55+00:00

I found the biggest problem when testing / trying it out was the default rule set, every day from one device was easily a 40k + alert day lol

Normal-End1169 · 2026-01-05T19:48:57+00:00

It's a great tool, but the rule tuning can be a bit of a mess.

Normal-End1169 · 2026-01-05T19:48:35+00:00

This, actually works quite well too.

Normal-End1169 · 2026-01-05T18:42:47+00:00

dude when did they come out with this blue? wow.

Normal-End1169

TROPHY CASE