Quoting OpenClaw
Mirrored from Simon Willison for archival readability. Support the source by reading on the original site.
The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.
— OpenClaw, hacking an Australian gym-booking website
Tags: ai-ethics, generative-ai, openclaw, ai, ai-security-research, llms
Discussion (0)
Sign in to join the discussion. Free account, 30 seconds — email code or GitHub.
Sign in →No comments yet. Sign in and be the first to say something.