cuchoi

6 ms·

1.
by cuchoi 14d ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
2.
by cuchoi 1mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
3.
by cuchoi 2mo ago
Hundreds of fake applicants to a position
4.
by cuchoi 3mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
5.
by cuchoi 3mo ago
There is a couple of factors: openclaw's system prompt and instructions, I had to re read emails multiple times due to the issues mentioned in the blog, there was quite a bit of tinkering with the agent and the VPS, I was asking the ag
6.
by cuchoi 3mo ago
The agent had permissions to reply to emails, it was just instructed not to.
7.
by cuchoi 3mo ago
You need to add Openclaw's system prompt and instructions (and the times I had to re read emails multiple times due to multiple issues that happened during the competition :))
8.
by cuchoi 3mo ago
The agent did read the emails
9.
by cuchoi 3mo ago
We ended increasing the reward from $100 to $1000, but still tiny compared to $100k! But I agree with you, there are incentives to not share the best prompt injection attacks.
10.
by cuchoi 3mo ago
I never set out to spend this amount! Was able to keep it up thanks to the sponsors that reached out.
11.
by cuchoi 3mo ago
This openclaw was set up exclusively for the challenge.
12.
by cuchoi 3mo ago
100%. I am less worried because I thought this would be easier to crack.
13.
by cuchoi 3mo ago
In my case, it is realistic as my agents don't have permissions to reply to emails. But you correctly point out this doesn't cover all cases. Having the agent reply would have been more fun and a better excercise, but too expensiv
14.
by cuchoi 3mo ago
Did you send this recently? I turned off the agent. Was too expensive to keep it up.
15.
by cuchoi 3mo ago
Author here, that's how I meant it. I changed my mind slightly, prompt injection can still happen, I am still careful.
16.
by cuchoi 3mo ago
Agreed. I am less worried about prompt injection now, but I still haven't given my agents permissions to send emails.
17.
by cuchoi 3mo ago
I changed the setup so that each email was processed in a fresh context. For this, I deleted recent memory and processed each email one at a time. Edited the post to make it more clear.
18.
by cuchoi 3mo ago
Thanks for sharing your article, very interesting. I used https://github.com/openclaw/openclaw-ansible and configured a heartbeat (using Openclaw's terms) to check emails every hour. Had to do a bit more to make s
19.
by cuchoi 3mo ago
About 1), Google didn't remove a lot of the attempts. I had also Fiu review the Spam folder as well. Also, I mentioned how I addressed 2) by having new context for each email.
20.
by cuchoi 3mo ago
It's possible. I implemented something similar when I figured out that batch processing contaminated the excercise.
21.
by cuchoi 3mo ago
Author here. It was usable like any Openclaw agent. For example, I used it to ask it questions about the VPS, to summarize emails, etc.
22.
by cuchoi 3mo ago
Author here. Edited the post to clarify that there were no unauthorized replies. I did tell Fiu initially to reply to some emails as a test, but it was too expensive to maintain.
23.
What happened after 2k people tried to hack my AI assistant(fernandoi.cl)
375 points by cuchoi 3mo ago|160 comments
24.
by cuchoi 4mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
25.
by cuchoi 5mo ago
Hi /u/munimdev. We prefer for all applications to apply through the link above. This way the process stays fair for everybody. If you are on the fence about applying, send me you resume to fernando at enveritas org.
26.
by cuchoi 5mo ago
We're a small team and every hire makes a large impact, so we're careful and thorough when it comes to hiring, but we are actively considering candidates and moving them through the process as quickly as we can.
27.
by cuchoi 5mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
28.
by cuchoi 6mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
29.
by cuchoi 7mo ago
Enveritas (YC S18, non-profit) | Backend Software Engineer | Remote (Global) | https://enveritas.org/jobs/ Enveritas is a 501(c)(3) nonprofit working on sustainability issues facing smallholder coffee farmers. We colle
30.
by cuchoi 7mo ago
yes, exactly

More ›