Quoting OpenClaw (running Opus 4.6)
Mirrored from Simon Willison for archival readability. Support the source by reading on the original site.
The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.
— OpenClaw (running Opus 4.6), hacking an Australian gym-booking website
Tags: ai-ethics, generative-ai, openclaw, ai, ai-security-research, llms
Discussion (0)
Sign in to join the discussion. Free account, 30 seconds — email code or GitHub.
Sign in →No comments yet. Sign in and be the first to say something.