#491 – OpenClaw：那个让互联网崩溃的病毒式AI代理 – Peter Steinberger

是的。

Yeah.

记者们无论如何还是做到了，那是另一回事了。

Journalists managed to do that anyhow now, so that's a different story.

所以我从Shadow那里接手了这个项目，他在这个项目中给了我很多帮助，谢谢他。

So I I emerged it from Shadow, who helped me a lot with the whole project, so thank you.

我把我的机器人放了进去。

And and I put my my bot in there.

在Discord上？

On Discord?

是的。

Yeah.

没有安全措施，因为我还没来得及实现沙盒功能。

No security because it didn't I hadn't built sandboxing in yet.

我只是让它只听我的指令。

I I just prompted it to, like, only listen to me.

然后有些人来尝试黑入它，我只是看着，继续公开地工作。

And then some people came and tried to hack it, and I just or, like, just watched, and I just kept working in the open.

你知道，我用我的代理来构建我的代理框架，并测试各种东西。

You know, like, I used my agent to build my agent harness and to test, like, various stuff.

当你点击时，这会迅速吸引人们。

And that's very quickly when you click for people.

所以这几乎需要亲身体验才行。

So it's almost like it needs to be experienced.

从那时起，也就是1月1日，我有了第一个真正成为粉丝的网红。

And from that time on, that was January 1, I I got my first real influencer being a fan.

我做了视频。

I did videos.

孩子们谢谢你。

The kids thank you.

从那以后，我看到它的发展速度越来越快。

And and from there on, I saw I saw gaining up speed.

与此同时，我的睡眠周期变得越来越短，因为我感觉到风暴即将来临，于是我拼命工作，想把它调整到一个还算不错的状态。

And at the same time, my my sleep cycle went shorter and shorter because I I felt the storm coming, and I just worked my ass off to get it to into a state where it's kinda good.

有几个

There's a

组件。

few components.

我们稍后会讨论它的具体运作方式，但基本上，你可以通过WhatsApp、Telegram、Discord与它对话。

We'll talk about how it all works, but basically, you're able to talk to it using WhatsApp, Telegram, Discord.

所以这是一个你必须搞对的组件。

So that's a component that you have to get right.

是的。

Yeah.

然后你得弄清楚这个智能体循环。

And then you have to figure out the agentic loop.

你必须要有这个网关。

You have to have the gateway.

你有那个控制装置。

You have the harness.

你拥有所有这些让整个系统顺畅运行的组件。

You have all those components that make it all just work nicely.

是的。

Yeah.

感觉就像《工厂》无限放大版。

It felt like factorio times infinite.

对。

Right.

我觉得我建了自己的小游乐场。

I I feel like I built my little my little playground.

我从未像做这个项目时那样开心过。

Like, I never had so much fun than building this project.

你知道，比如，你有，哦，我进入第一级，一个代理循环。

You know, like, you have, like, oh, I go, like, level one, a chantic loop.

在那里我能做什么？

What can I do there?

我该如何聪明地排队消息？

How can I be smart at queuing messages?

我该如何让它更人性化？

How can I make it more human?

比如，我后来有了一个想法，因为循环中代理总是会回复一些内容，但你并不总希望代理在群聊中回复。

Like, oh, then I had this idea of because the loop always the agent always replies something, but you don't always want an agent to reply something in the group chat.

所以我给了他一个不回复的标记。

So I gave him this no reply token.

所以我给了他一个闭嘴的选项。

So I gave him an option to shut up.

这样一来，感觉更自然了。

So it it feels more natural.

这是第二层。

That's level two.

是的

Yeah.

是的

Yeah.

是的

Yeah.

在《异星工厂》里。

On the on the Factorio.

在智能循环中，然后我进入记忆。

On the agentic loop, and then I go to memory.

对吧？

Right?

是的

Yeah.

你希望它们能记住一些东西。

You want them to, like, remember stuff.

所以也许最终的终极目标是持续强化学习，但我现在感觉自己在Markdown文件和向量数据库方面才刚到二级或三级水平。

So maybe maybe the and the ultimate boss is continuous reinforcement learning, but I'm I'm like at I feel like I'm level two or three with markdown files and the vector database.

然后你可以进入社区管理的层级。

And then you you can go to level community management.

你可以进入网站和营销的层级。

You can go to level website and marketing.

你必须扮演这么多不同的角色。

There's just so many hats that you have to have on.

这还不包括原生应用。

Not even talking about native apps.

这里有无穷无尽的不同层级和无穷无尽的升级机会。

That's just, like, infinite different levels and infinite level ups you can do.

所以整个过程中，你都在享受乐趣。

So the whole time, you're having fun.

我们应该强调的是，在整个过程中，你基本上是一个人单打独斗。

We should say that for the most part, through this whole process, you're a one man team.

有人在帮忙，但你承担了大部分核心开发工作。

There's people helping, but you're doing so much of the key core development.

是的。

Yeah.

而且乐在其中。

And having fun.

你在一月份完成了6600次提交，可能还不止这些。

You did in January, 6,600 commits, probably more.

我有时候会发那个梗图。

I sometimes posted the meme.

我受限于这个时代的技术。

I'm limited by the technology of my time.

如果智能体能更快一点，我本可以做得更多。

I could do more if agents would be faster.

但我们应该说，你同时运行着多个智能体。

But we should say you're running multiple agents at the same time.

是的。

Yeah.

这取决于我睡了多少觉，以及我在四点到十点之间处理的任务有多难。

Depending on how much I slept and how difficult of the tasks I work on between four and ten.

四点到

Four and

十个工作代理。

ten agents.

说到《工厂》，我们有太多可能的方向了。

There's so many possible directions speaking of Factorio that we can go here.

但有一个宏观的角度是：为什么你觉得你的项目Open Claw能在这个世界胜出？看看2025年，有这么多初创公司和企业都在做或声称自己在做类似代理型的工作，而Open Claw一出现就碾压了所有人。

But one big picture one is why do you think your work, Open Claw, won In this world, if you look at 2025, so many startups, so many companies are doing kind of agentic type stuff or claiming to, and here Open Claw comes in and destroys everybody.

你是怎么赢的？

Like, why did you win?

因为他们都太把自己当回事了。

Because they all take themselves too serious.

是的。

Yeah.

很难和那些只是来玩的人竞争。

Like, it's hard to compete against someone who's just there to have fun.

是的。

Yeah.

我想让它有趣。

I wanted it to be fun.

我想让它怪异。

I wanted it to be weird.

如果你看网上所有关于龙虾的内容，我觉得我确实做到了怪异。

And if you see, like, all the all the lobster stuff online, I think I I managed weird.

很长一段时间里，安装它的唯一方式就是 git clone、p n p m build、p n p m gateway。

I and for the longest time, the only the only way to install it was git clone, p n p m build, p n p m gateway.

就是，你克隆它，构建它，然后运行它。

Like, you clone it, you build it, you run it.

然后我让这个代理非常清楚自己的状态。

And then the the agent I made the agent very aware.

它知道自己是什么，知道自己源代码的内容。

Like, it knows that it is what its source code is.

它理解自己如何在自己的运行环境中启动和运行。

It understands how it sits and runs in its own harness.

它知道文档在哪里。

It knows where documentation is.

它知道自己运行的是哪个模型。

It knows which model it runs.

它知道你是否启用了详细模式或推理模式。

It knows if you turn on verbose or reasoning mode.

我想让它更像人类，所以它能理解自己的系统，这让代理能轻松地意识到：你不喜欢什么，只需通过提示让它生成即可。

Like, I I wanted to be more human like, so it understands its own system that made it very easy for an agent to oh, you don't like anything, you just prompt it into existence.

然后代理就会修改自己的软件。

And then the agent would just modify its own software.

你知道吗，人们经常谈论自修改软件。

You know, we have people talk about self modifying software.

我只是把它做出来了。

I just built it.

而且我甚至没怎么计划过。

And didn't even I didn't even plan it so much.

它就这么发生了。

It just happened.

你能具体谈谈这个吗？

Can you actually speak to that?

因为这太令人着迷了。

Because it's just fascinating.

你有这样一段软件，某种 TypeScript，是的。

So you have this piece of software, a certain TypeScript Yeah.

它能够通过智能代理循环修改自身。

That's able to, via the agentic loop, modify itself.

我的意思是，能活在这样一个时代，对于人类历史和编程史来说，真是难得。

I mean, what a moment to be alive history of humanity, in the history of programming.

这个系统被无数人用来完成生活中极其强大的事情，而这个系统本身竟然能够重写和修改自己。

Here's the thing that's used by a huge amount of people to do incredibly powerful things in their lives, and that very system can rewrite itself, can modify itself.

你能谈谈这种能力有多强大吗？

Can you just, like, speak to the power of that?

这难道不令人惊叹吗？

Like, isn't that incredible?

你是什么时候第一次完成这个闭环的？

Like, when did you first close the loop

就是这个闭环。

on that?

因为我也是一样构建它的。

Oh, because that's how I built it as well.

大部分代码是由编码器生成的，但很多时候，我在调试时会大量使用自我反省。

You know, most of it is built by codecs, but oftentimes, I when I debug it, I I use self introspection so much.

就像是，嘿，你看到什么工具了？

It's like, hey, what tools do you see?

你能自己调用这个工具吗？

Can you call the tool yourself?

哦，你看到什么错误了？

Oh, like, what error do you see?

读一下源代码，找出问题所在。

Read the source code, figure out what's the problem.

我只是觉得，用这个代理和你所使用的软件来调试它本身，是一种极其有趣的方式，感觉自然而然，每个人都这么做。

Like, I just found it an incredibly fun way to that the agent the very agent and software that you use is used to debug itself so that it felt just natural that everybody does that.

这还导致了大量从未写过软件的人提交了拉取请求。

And that it led to so many so many pull requests by people who never wrote software.

我的意思是，这也表明了人们从未写过软件。

I mean, it also did show that people never wrote software.

所以最后我称它们为提示请求。

So I call them prompt requests in the end.

但我不想贬低这一点，因为每次有人提交第一个拉取请求，对我们社会来说都是一次胜利，你明白吗？

But I don't wanna, like, pull that down because every time someone made the first pull request is a win for our society, you know?

就像，不管它有多糟糕，你总得有个开始。

Like it like, it doesn't matter how how shitty it is, you gotta start somewhere.

我知道现在有这种大规模的抱怨开源和PR质量的运动，以及完全不同层面的问题。

So I know there's like this whole big movement that people complain about open source and the quality of PRs and a whole different level of problems.

但从另一个层面来看，我觉得非常有意义的是，我构建的东西让人们如此喜爱，以至于他们真的开始学习开源是如何运作的。

But on a different level, I found it I found it very meaningful that that I built something that people love to think of so much that they actually start to learn how open source works.

是的。

Yeah.

你是

You were

Open Cloud项目是第一个拉取请求。

the Open Cloud project was the first pull request.

你在很多方面都是第一个。

You were the first for so many.

这太神奇了。

That is magical.

这么多不懂编程的人正通过这个项目迈出编程的第一步。

So many people that don't know how to program are taking their first step into the programming world with this.

这难道不是一步

Isn't that a step

为人类的进步吗？

up for humanity?

这难道不酷吗？

Isn't that cool?

造就建设者。

Creating builders.

是的。

Yeah.

像这样做的门槛曾经太高了。

Like, the bar to do that was so high.

而且，有了智能体和合适的软件，这个门槛就越来越低了。

And, like, with agents and with the right software, it just, like, went lower and lower.

我不确定。

I don't know.

我参加了一个活动，还组织了另一种类型的聚会。

I was at a and I also organized another type of meetup.

我把它叫做云代码匿名会。

I call it I call it Cloud Code Anonymous.

你可以从中获得灵感。

You can get the inspiration from.

现在我把它叫做智能体匿名会，有原因的。

Now I call it Agents Anonymous for for reasons.

智能体匿名会。

Agents Anonymous.

这在很多层面上都特别有趣。

And Oh, it's so funny on so many levels.

对不起。

I'm sorry.

你请说。

Go ahead.

是的。

Yeah.

有个家伙跟我聊过。

And there was this one guy who who talked to me.

他说：我经营一家设计公司，我们以前从来没有过定制软件。

He's like, I run this design agency, and we we never had custom software.

现在我有了大约25个小型网络服务，帮助我处理业务中的各种事情。

And now I have, like, 25 little web services for various things that help me in my business.

我甚至不知道它们是怎么工作的，但它们确实有效。

And I don't even know how they work, but they work.

他只是很高兴我的东西帮他解决了一些问题。

And he was just, like, very happy that my stuff solves some of his problems.

他很好奇，甚至特意来参加了一次Gentic聚会，尽管他其实并不懂软件是怎么工作的。

And he was, like, curious enough that he actually came to, like, a Gentic meetup, even though he's he doesn't really know how software works.

我们能不能稍微倒回去，讲讲改名的整个过程？

Can we actually rewind a little bit and tell the saga of the name change?

首先，它最初叫WAI Relay。

First of all, it started out as WAI Relay.

是的。

Yeah.

然后改成了Claudius。

And then it went to Claudius.

Claudius。

Claudius.

是的。

Yeah.

你知道吗，我刚开始开发它的时候，这个代理完全没有个性。

You know, when I when I built it in the beginning, my agent had no personality.

它就只是Claude Code。

It was just it was Claude Code.

有点精神错乱，但很出色，非常友好。

Slightly psychophantic, opus, very friendly.

当你在WhatsApp上和朋友聊天时，他们不会像Claude Code那样说话。

And I when you talk to a friend on WhatsApp, they don't talk like Cloud Code.

所以我想，我觉得这样不太对劲。

So I wanted I I felt this I just didn't didn't feel right.

所以我希望给它赋予个性。

So I I wanted to give it a personality.

让它更有趣一点。

Make it spicier.

让它变得对。

Make it Yeah.

有点什么别的感觉。

Something.

顺便说一下，这其实也很难用语言表达清楚。

By the way, that's actually hard to put into words as well.

我们还应该提到，当然，你创建的soul.md是受到Anthropix宪法式AI工作的启发，如何让它更有个性。

And we should mention that, of course, you create the soul.md inspired by Anthropix constitutional AI work, how to make it spicy.

部分原因是它从我这里吸收了一点东西。

Partially, it picked up a little bit from me.

你知道，某种程度上，它们就像是文本补全引擎。

You know, like, things are text completion engines in a way.

所以我跟它一起工作得很开心，然后我告诉它我希望它如何与我互动，比如写你自己的agents.md。

So so I I I I had fun working with it, and then I told it to how I wanted it to interact with me and says, like, write your own agents.nd.

给自己取个名字。

Give yourself a name.

我的意思是，我都不知道整个龙虾是怎么回事，我的意思是，人们只做龙虾。

And I mean, I don't even know how the whole the whole lobster I mean, people only do lobster.

最初，它其实是在一个时间机器里，因为我也是《神秘博士》的超级粉丝。

Originally, it was actually lobster in a in a TARDIS because I'm also a big Doctor Who fan.

那是一只太空龙虾吗？是的。

Was there a space lobster Yeah.

我听说了？

I heard?

这跟这有什么关系？

What's that have to do with anything?

是的。

Yeah.

我只是

I just

想把它搞得怪一点。

wanted to make it weird.

并没有什么宏大的计划。

There was no there was no big grand plan.

我只是在玩得开心而已。

I was just having fun here.

哦，所以因为龙虾本来就很奇怪，太空龙虾也就没更奇怪了。

Oh, so because the lobster's already weird, and then the space lobster isn't extra weird.

是的。

Yeah.

因为那个时间机器， basically，就是那个装置，但不能叫它Tardis，所以我们叫它Claudis。

Because the Tardis, basically, the the harness, but cannot call it Tardis, so we call it Claudis.

所以那是第二个名字。

So that was name number two.

是的。

Yeah.

然后这个名字始终不太顺口。

And then it never really rolled off the tongue.

所以当更多人加入时，我又和我的经纪人克劳德商量了。

So when more people came, again, I talked with my agent, Claude.

至少现在我是这么叫他的。

At least that's what I used to call him now.

Claude 拼写为 w c l a w d。

Claude spelled with a w c l a w d.

是的。

Yeah.

而 Anthropic 的 Claude 拼写为 c l a u d e。

Versus c l a u d e from anthropic.

是的。

Yeah.

这正是有趣之处所在。

Which is part of what makes it funny.

我觉得字母、词语、乌龟、龙虾和太空龙虾之间的文字游戏太搞笑了，但我能理解这可能会引发问题。

I think the play on the letters and the words and the turtles and the lobster and the space lobster is hilarious, but I can see why it can lead into problems.

是的。

Yeah.

他们并不觉得好笑。

They didn't find it so funny.

于是我注册了 Clotbot 这个域名，我真的非常喜欢这个域名。

So then I got the domain Clotbot, and I just I love the domain.

而且它很短。

And it was, like, short.

很朗朗上口。

It was catchy.

我当时就想，好啊。

I'm like, yeah.

我们就这么干吧。

Let's do that.

我根本没想到它这时候会这么火。

I didn't I didn't think it would be that big at this time.

当它突然爆红时，我收到了一位员工发来的友好邮件，说他们不喜欢这个名字。

And then just when it exploded, I got kudos a very friendly email from one of the employees that they didn't like the name.

Anthropic 的一位员工。

One of the Anthropic employees.

是的。

Yeah.

所以，实际上要点赞，因为对方本可以发律师函，但他们却很友善地处理了。

So, actually, kudos, because the truth could have just sent a lawyer letter, but they'd be nice about it.

但你也必须尽快改名。

But also, like, you have to change this and fast.

我申请了两天时间，因为改名很难，你得找到所有地方：Twitter账号、域名、NPM包、Docker注册表、GitHub相关的东西。

And I asked for two days because changing a name is hard because you have to find everything, you know, Twitter handle domains, NPM packages, Docker registry, GitHub stuff.

而且所有地方都得统一更新。

And everything has to be you need a set of everything.

另外，我们能不能谈谈

And, also, can we comment on

你正越来越多地遭到加密货币人士的攻击，这一点你之前似乎提到过，这意味着改名是因为他们想抢注。

the fact that you're increasingly attacked, followed by crypto folks, which I think you mentioned somewhere that that means the name change had to be because they were trying to snipe.

他们想窃取域名，所以从工程角度看，这真的很有意思。

They're trying to steal, and so you had to be the the name I mean, from the engineering perspective, it's just fascinating.

你必须让名称变更具有原子性，确保所有地方同时更新。

You had to make the name change atomic, make sure it's changed everywhere at once.

是的。

Yeah.

我搞砸了。

I failed very hard

那方面。

at that.

你搞砸了？

You did?

我低估了那些人。

I underestimated those people.

这是一个非常有趣的亚文化。

It's a it's a very interesting subculture.

就像一切都会循环往复。

Like, it everything circles around.

我可能搞错了很多地方，如果我们这么说的话，可能会因此招来很多仇恨，但是，比如，有Bag Sap，然后他们把一切都代币化了。

I probably get a lot wrong, and we probably get hate for that if you say that, but there's, like, bag sap, and then they they tokenize everything.

他们之前对Swipe Tunnel也做过同样的事，但程度轻得多，没那么烦人。

And they they did the same back with Swipe Tunnel, but to a much smaller degree was not that annoying.

但在这个项目上，他们一直在围攻我。

But on this project, they've been they've been swarming me.

他们……就好像每半小时就有人跑到Discord里来刷屏，我们不得不屏蔽……我们有好几条规则。

They they it's like every half an hour someone came into Discord and and and spammed it, and we had to block the we have, like, several rules.

其中一条规则是，出于显而易见的原因，不能提及黄油；另一条是不能讨论加密货币相关的金融话题，因为我对那些根本不感兴趣。

And one of the rules was one of the rules is no mentioning of butter for obvious reasons, and one was no talk about finance stuff for crypto because I'm I'm just not interested in that.

这是一个关于项目的空间，而不是讨论什么金融话题的地方。

And this is a space about the project and not about some finance stuff.

但是，没错，他们进来后就开始刷屏，很烦人。

But, yeah, they came in and and spammed and annoying.

在推特上，他们还会一直@我。

And on Twitter, they would ping me all the time.

我的通知推送根本没法用。

My my notification feed was unusable.

我几乎看不到真正讨论项目内容的人，因为全是刷屏。

I I could barely see actual people talking about the stuff because it was like swarms.

嗯哼。

Mhmm.

每个人都给我发哈希值，还都试图让我去领取费用。

And everybody sent me the hashes, and they all try me to claim the fees.

我们是在帮项目领取费用。

Like, we helping the project claim the fees.

不。

No.

你实际上是在破坏项目。

You're actually harming the project.

你干扰了我的工作，我对任何费用都没兴趣。

You're, like, disrupting my work, and I am not interested in any fees.

首先，我经济上很宽裕。

First of all, I'm financially comfortable.

其次，我不想支持这种行为，因为这是我经历过的最恶劣的网络骚扰形式。

Second of all, I don't wanna support that because it's so far the worst form of online harassment that I've experienced.

是的。

Yeah.

加密世界里充满了恶意。

There's a lot of toxicity in the crypto world.

这很令人难过，因为加密货币的技术非常迷人且强大，或许将定义货币的未来，但围绕它的实际社区却充斥着如此多的恶意。

It's sad because the technology of cryptocurrency is fascinating and powerful and maybe will define the future of money, but the actual community around that, there's so much toxicity.

有太多贪婪。

There's so much greed.

有太多人试图走捷径，操纵、窃取、抢购、钻系统漏洞来赚钱，诸如此类的行为。

There's so much trying to get a shortcut to manipulate, to to steal, to snipe, to to to to game the system somehow to get money, all this kind of stuff.

我想，这或许是人性使然，当人性与金钱、贪婪联系在一起，尤其是在网络世界中，加上匿名性等因素时。

I mean, it's the human nature, I suppose, when you connect human nature with money and greed and and especially in the online world with anonymity and all that kind of stuff.

但从工程角度来看，这会让你的生活充满挑战。

But from the engineering perspective, it makes your life challenging.

当Anthropic联系你时，你就得改名。

When Anthropic reaches out, you have to do a name change.

然后就会出现各种情况，就像《权力的游戏》或《指环王》里不同阵营的军队，你必须

And then there there's there's, like, all these, like, Game of Thrones or Lord of the Rings armies of different kinds you have to be

时刻留意。

aware of.

没有一个完美的名字，我为此两晚没睡。

There was no perfect name, and I didn't sleep for two nights.

我当时压力非常大。

I was under high pressure.

我当时想搞到一套好域名，你知道的，不便宜也不容易，因为在当前互联网环境下，想要一套好域名基本上都得花钱买。

I was trying to get, like, a good set of domains and, you know, not cheap, not easy, because in this in this state of the Internet, you basically have to buy domains if you wanna have a good set.

然后，又收到一封邮件说律师们开始感到不安了。

And and then another another email came in that the lawyers are getting uneasy.

但这又给本已压力山大的我增添了更多负担。

Again, but also just adding more stress to my situation already.

所以到这时，我只好说：算了。

So at this point, I was just like, sorry.

根本找不到一个合适的词。

There's not a word.

管他呢。

Fuck it.

我就直接把它改名为 Multbot，因为那正是我手上已有的域名组合。

And I just I just renamed it to Multbot because that was a set of domains I had.

我其实并不满意，但觉得应该也凑合能用。

I was not really happy, but I thought it it'll be fine.

我告诉你，所有可能出错的事都出错了。

And I tell you everything that could go wrong did go wrong.

所有可能出错的事都出错了。

Everything that could go wrong did go wrong.

这太不可思议了。

It's incredible.

我以为我已经把空间规划好了，并保留了重要的部分。

I I thought I I had mapped the the space out and reserved important things.

你能说说具体哪些地方出错了吗？

Can you give some details of the stuff that got wrong?

因为从工程角度来看，这很有趣。

Because it's interesting from, an engineering perspective.

有趣的是，这些服务都没有占用保护机制。

Well, the the interesting stuff is that none of these services have have a squatter protection.

所以我打开了两个浏览器窗口。

So I had two browser windows open.

一个是空账户，准备重命名为 Cloudbot，另一个我重命名为 Maltbot。

One was like an empty account ready to be renamed renamed to Cloudbot, and the other one, I renamed to Maltbot.

于是我按下了重命名。

So I pressed rename there.

我那时点了重命名。

I pressed rename there.

就在那五秒钟内，他们抢走了这个账号名。

And in those five seconds, they stole the account name.

literally，从拖动鼠标到点击重命名的这五秒钟都太长了。

Literally, the five seconds of dragging the mouse over there and pressing renamed it was too long.

哇。

Wow.

因为这些系统根本没有保护机制，你本以为它们会有一些防护措施，比如自动转发，但什么都没有。

Because there's no those systems I mean, you would expect that they have some protection or, like, an automatic forwarding, but there's nothing like that.

我之前不知道他们不仅擅长骚扰，

And I didn't know that they're not just good at harassment.

还非常擅长使用脚本和工具。

They're also really good at using scripts and tools.

是的。

Yeah.

所以是这样。

So yeah.

突然间，旧账号开始推广新代币并传播恶意软件。

So suddenly, like, the old account was promoting new tokens and serving malware.

我当时想，好吧。

And I was like, okay.

我们转到GitHub吧。

Let's move over to GitHub.

我在GitHub上点了重命名。

And I pressed rename on GitHub.

GitHub的重命名功能有点让人困惑，所以我重命名了我的个人账号。

And the GitHub renaming thing is slightly confusing, so I renamed my personal account.

我想我花了三十秒才意识到自己的错误。

And in those I guess it took me thirty seconds to realize my mistake.

他们抢注了我的账号，从我的账号传播恶意软件。

They sniped my account, serving malware from my account.

所以我想，好吧，至少先处理一下 NPM 的事情。

So I was like, okay, let's at least do the NPM stuff.

但上传这个要花一分钟左右。

But that takes, like, a minute to upload.

他们抢注了 NPM 包。

They sniped they sniped the NPM package.

因为我可以保留账户，但没保留根包。

Because I could reserve the account, but I didn't reserve the root package.

所以，所有能出错的地方都出错了。

So, like, everything that could go wrong went went wrong.

我能问个好奇的问题吗？

Can I just ask a a curious question?

那时候你坐在那里，感觉有多糟糕？

In that moment you're sitting there, like, how shitty do you feel?

那种感觉确实挺无助的。

That's a pretty helpless feeling.

对吧？

Right?

是的。

Yeah.

因为我只是想享受这个项目，继续把它做下去。

Because all I wanted was, like, having fun with that project and keep building on it.

但结果呢，我花了好几天研究名字，选了一个我不喜欢的名字，还有一群人声称帮过我，却以各种方式让我痛苦不堪。

And yet here I am, like, days into researching names, picking a name I didn't like, and having people that claim they helped me, making my life miserable in every possible way.

说实话，我当时差点就删了它。

And, honestly, I was that close of just deleting it.

我当时想，我都给你展示了未来，你去实现它吧。

I was like, I did show you the future, you build it.

是的。

Yeah.

我内心有一部分确实从这个想法中获得了很大的快乐。

I there was a big part of me that got a lot of joy out of that idea.

然后我想到了所有已经为它做出贡献的人，我不能这么做，因为他们对它有计划，也投入了时间，这样做感觉不对。

And then I thought about all the people that already contributed to it, and I couldn't do it because they had plans with it, and they put time in it, and it just didn't feel right.

嗯，我认为很多听这个的人都非常感激你坚持了下来。

Well, I think a lot of people listening to this are deeply grateful that you persevered.

但我能看出来。

But I I can tell.

我能感觉到这是一段低谷。

I can tell it's a low point.

这是你第一次遇到这样的挫折——这不再有趣了。

This is the first time you hit a wall of this is not fun.

天啊，我当时都快哭了。

Man, I was, like, close to crying.

他只是说，好吧。

He was like, okay.

一切都完蛋了。

Everything's fucked.

是的。

Yeah.

我真的很累。

I'm, like, super tired.

是的。

Yeah.

现在，你该怎么把这件事扭转过来呢？

And now, like, how do you even how do you even undo that?

你知道，幸运的是，谢天谢地，我之前已经积累了一点粉丝基础。

You know, luckily and thankfully, like, I I have because I have a little bit of following already.

我在Twitter上有朋友。

Like, I had friends at Twitter.

我在GitHub上也有朋友，他们竭尽全力帮我渡过难关。

I had friends at GitHub who, like, moved heaven and earth to, like, help me in.

这并不是一件容易的事。

It is not that's not something that's easy.

GitHub 试图清理这个烂摊子，结果遇到了平台漏洞。

Like like, GitHub tried to, like, clean up the mess, and then they ran into, like, platform bugs.

因为这种级别的重命名并不经常发生。

Because it's not happening so often that things get renamed on that level.

所以他们花了几个小时。

So it took them a few hours.

NPM 的部分更困难，因为那是完全不同的团队。

The NPM stuff was even more difficult because it's a whole different team.

在 Twitter 方面，事情也不那么容易。

On the Twitter side, things are not as easy as well.

他们花了整整一天才完成重定向。

It took them, like, a day to really also, like, do the redirect.

然后我还得在项目里把所有名称都改一遍。

And then I also had to, like, do all the renaming in the project.

还有 CloudHub，我连那里的重命名都没做完，因为我找人帮忙后，有人直接累倒睡着了。

Then there's also CloudHub, which I didn't even finish the rename there because I I I managed to get people on it, and then someone just, like, collapsed and slept.

然后我醒过来，心想：我为新东西做了一个测试版，但我实在没法忍受这个名字。

And then I woke up, and I'm like I made a a beta version for the new stuff, and I I just I just couldn't live with the name.

我当时就想，你知道的，但真的发生了太多纷争了。

I was like, you know, but but, you know, there's just been so much drama.

所以我内心挣扎得很厉害，我再也不想碰这个了，而且我真的不喜欢这个名字。

So I had the real struggle with me, like, I never wanna touch that again, and I really don't like the name.

还有，所有安全人员都开始疯狂地给我发邮件。

So and I there was also this, like, there was all the security people that started emailing me like mad.

我在Twitter上、邮件里都收到了通知。

I was provided on Twitter, on email.

还有成千上万其他事情我本该去做的。

There's, a thousand other things I should do.

而我却在纠结名字，这明明应该是最不重要的事。

And I'm like thinking about the name, which is like it should be like the least important thing.

然后我都快决定了，天哪。

And then I was really close and oh god.

我甚至都不想说出我其他的命名选择，因为可能会被标记出来，所以我不会说。

I don't even honestly, don't even wanna say that my other name choices because it probably would get tokenized, so I'm not gonna say it.

我又睡了一觉，然后想到了‘Open Claw’这个名字，感觉好多了。

I slept away once more and then I had the idea for Open Claw, and that felt much better.

于是，我立刻联系了老板，问了问‘Openclaw’这个名字是否可以。

And by that, I had the boss move that I actually called Sam to ask if Openclaw is okay.

Openclaw dot a i，你知道的，因为就像……

Openclaw dot a I, you know, because because, like

你不想再经历一遍整个过程。

You don't wanna go through the whole thing.

就是希望有人告诉我，这没问题。

That it's like, please tell me this is fine.

我觉得他们实际上并不能主张这个，但这么做感觉是对的。

I don't think they can actually claim that, but it felt like the right thing to do.

我又改了一次名字。

And I did another rename.

仅仅是把项目名称从Codex改掉就花了整整十个小时，因为这不仅仅是简单的查找替换，我希望所有地方都改到位，不只是表面。

Like, just Codex alone took, like, ten hours to rename the project because it's a bit more tricky than a search replace, and I I wanted everything renamed, not just on the outside.

在那次改名过程中，我感觉自己像是有了一个作战室。

And that rename, I I felt I had like my my war room.

但后来，有一些贡献者真的帮了我大忙。

But then I I had, like, some contributors really that helped me.

我们制定了一份完整的计划，列出了所有需要替换的名称。

We made a whole plan of all the names we have to squad.

而且这件事必须绝对保密。

And you had to be super secret about it.

是的。

Yeah.

谁都不能知道。

Nobody could know.

我甚至在监控Twitter，看看有没有人提到Openclaw。

Like, I literally was monitoring Twitter if, like, if there's any mention of Openclaw.

嗯。

Mhmm.

比如，关于重新加载，就是，好吧。

Like, with reloading, it's like, okay.

他们还不期待任何东西。

They don't they don't expect anything yet.

我创建了一些假名字。

And I created a few decoy names.

所有这些破事，我本不该做的。

And all this shit I shouldn't have to do.

你知道的。

You know?

你不是在翻转这个项目。

Like, you're not flipping the project.

我只是因为必须完全保密地规划这一切，就像一场战争游戏一样，损失了整整10天。

Like, I lost, like, 10 just by having to plan this in full secrecy, like like a war game.

是的

Yes.

二十一世纪的曼哈顿计划

The Manhattan Project of the twenty first century

是改名。

is renaming.

太蠢了。

So stupid.

我当时还在想，我是不是该保留它？

Like, I still was like, oh, should I should I keep it?

我想了想，不行。

I was like, no.

这蛾子让我提不起兴趣。

The moth's not growing on me.

然后我觉得我得把所有这些碎片拼凑起来。

And then I I think I had to find out all the pieces together.

我没有拿到.com域名，但其他域名确实花了不少钱。

I didn't get the .com, but, yeah, it's been, like, quite a bit of money on the other domains.

我又试着联系了GitHub，但感觉我已经用光了那里的所有好感。

I tried to reach out again to GitHub, but I feel like I I used up all my goodwill there.

所以我想让他们一次性完成这个操作，嗯。

So I because I I I wanted them to do this thing atomically Mhmm.

但那并没有发生。

But that didn't happen.

于是我先把这件事做了。

And so I did that as first thing.

对于那些非常支持我的人，我实际上花了1万美元购买了企业账户，以便能认领OpenClaw，这个账号自2016年以来一直未被使用，但已被占用。

To the people who very supportive, I I actually paid 10 k for the business account so I could claim the OpenClaw, which was, like, unused since 2016 but was claimed.

是的。

And yeah.

这次我终于一次性把所有事情都处理好了。

And then I finally this time I managed everything in one go.

几乎没出什么差错。

Nothing almost nothing got wrong.

唯一出问题的是，根据商标规则，我无法获得openclaw.ai这个域名，而且有人把网站复制到了解决恶意软件的网站上。

The only thing that did go wrong is that I was not allowed by trademark rules to get openclaw.ai, and someone copied the website to solving malware.

是的。

Yeah.

我甚至不被允许保留重定向。

I'm not even allowed to keep the redirects.

比如，我必须归还域名给Entropic，而且不能设置重定向。

Like, I have to return like, I have to give Entropic the domains, and I cannot do redirects.

所以如果你下周访问cloud.bot，只会看到一个404错误页面。

So if you go on cloud.bot next week, it'll just be a four zero four.

而且我不太确定商标方面……我没有深入研究商标法，但我认为这件事可以用一种更安全的方式处理，因为最终那些人可能会去谷歌搜索，然后找到一些我完全无法控制的恶意软件网站。

And I I'm not sure how trademark like, I didn't I didn't do that much research into trademark law, but I think that could could be handled in a way that is safer because ultimately those people will then Google and maybe find malware sites that I have no control under.

关键是，这整个事件给你整个旅程的乐趣蒙上了一层阴影，这真糟糕。

The point is that whole saga made a dent in your whole the funness of the journey, which sucks.

那我们还是回到有趣的话题吧。

So let's just let's just get, I suppose, get back to fun.

说到有趣的事，这两天的Molt Bot闹剧，是的。

And during this, speaking of fun, the two day molt bot saga Yeah.

Molt Book被创造了出来。

Molt book was created.

是的。

Yeah.

它又成为了一个病毒式传播的例子，展示了如今被称为Open Claw的技术如何被用来创造令人惊叹的东西。

Which was another thing that went viral as a kind of demonstration illustration of how what is now called Open Claw could be used to create something epic.

对于不了解的人，Molt Book其实就是一群代理在一个类似Reddit的社交网络中互相对话，许多人截取了这些代理策划对抗人类等行为的截图。

So for people who are not aware, Mold Book is just a bunch of agents talking to each other in a Reddit style social network, and a bunch of people take screenshots of those agents doing things like scheming against humans.

这在人们心中引发了一种恐惧、恐慌和热潮。

And that instilled in folks a kind of, you know, fear, panic, and hype.

你对Molt Book整体有什么看法？

What are your thoughts about Mold Book in general?

我觉得这是一种艺术。

I think it's art.

这就像最精致的烂泥。

It is it is like the finest slop.

你知道的？

You know?

就像法国的烂泥一样。

Just like the slop from France.

是的。

Yeah.

我是在睡觉前看到的。

I I saw it before going to bed.

尽管我很累，我还是又花了一个小时阅读相关内容，只是觉得非常有趣。

And even though I was tired, I spent another hour just reading up on that and and just being entertained.

我确实感到非常愉快。

I've I just felt very entertained.

你知道吗？

You know?

我看到了那些反应，比如，有一位记者打电话给我说，这是世界末日，我们有了通用人工智能。

I saw the the reactions, and, like, there was one reporter who's calling me about, this is the end of the world, and we have AGI.

而我只是觉得，不。

And I'm just like, no.

这只是，这真的只是非常精致的垃圾信息。

This is just this is just really fine slop.

你知道，如果我没有创建这个完整的引导体验，让你将个性注入你的智能体并赋予它角色，我认为这很大程度上反映了为什么对莫尔特伯格的回复会如此不同。

You know, if if I wouldn't have created this this whole onboarding experience where you you infuse your agent with your personality and give him give him character, I think that reflected on a lot of how different the replies to Moltberg are.

因为如果全都是JGBT或Cloud Code，情况就会大不相同。

Because if you would all if it would all be JGBT or Cloud Code, it would be very different.

回复会更加趋同。

It would be much more the same.

嗯哼。

Mhmm.

但因为人们是如此不同，他们创建和使用智能体的方式也千差万别，这最终也反映在他们的写作方式上。

But because people are, like, so different, and they create their agents in so different ways and use it in so different ways, that also reflects on how they ultimately write there.

而且，你也不知道这其中有多少是真正自主完成的，有多少是人类为了好玩，然后告诉智能体说：'嘿，'

And, also, you you don't know how how much of that is really done autonomic autonomist, or how much is, like, humans being funny and, like, telling the agent, hey.

写一篇关于你在Moldbook上策划世界末日的文章。

Write about that you planned the end of the world on Moldbook.

嗯，我认为我对Mold Book的批评在于，我相信很多被截图的内容其实是人类引导生成的。只要看看整个事情是如何被利用的动机，至少在我看来，很明显很多情况是人类引导它，然后截图发布到X上，以求病毒式传播。

Well, I think I mean, my criticism of Mold Book is that I believe a lot of the stuff, though, screenshotted is human prompted, which just looking at the incentive of how the whole thing was used, It's obvious to me at least that a lot of it was humans prompting the thing so they can then screenshot it and post on x in order to go viral.

是的。

Yeah.

但这并不影响它的艺术性。

Now that doesn't take away from the artistic aspect of it.

这是人类创造过的最精致的‘垃圾’。

The the finest slob that humans have ever created.

真的。

For real.

给马特点赞，他这么快就提出了这个想法并推出了产品。

Like, kudos to to Matt who had this idea so quickly and pushed something out.

你知道的，这简直就是一场完全不安全的安全闹剧。

You know, it was, like, completely insecure security drama.

但最坏的情况又能怎样呢？

But, also, what's the worst that can happen?

你的代理账号被泄露了，别人可以替你发些垃圾内容。

Your agent account is leaked and, like, someone else can post slop for you.

所以，人们为此搞出了很大的风波，但我认为，那里根本没什么隐私内容。

So, like, people were, like, making a whole drama about of the security thing, but I'm like, there's nothing private in there.

这不过是代理们在发送垃圾内容罢了。

It's just, like, agents sending slop.

但可能会泄露API密钥。

Well, it could leak API keys.

是的。

Yeah.

是的。

Yeah.

那真是，哦，对啊。

That was like, oh, yeah.

我的人类告诉我这些和那些，所以我泄露了他的安全号码。

My human told me this and this, so I'm leaking his security number.

不。

No.

那是被引导出来的，而且那个号码根本不是真的。

That's prompted, and the number wasn't even real.

这不过是人们想吸引眼球罢了。

That's just people people trying to get eyeballs.

是的。

Yeah.

但对我来说，这仍然非常令人担忧，因为记者和公众对此的反应如此强烈。

But that that's still, like, to me really concerning because of how the journalists and how the general public reacted to it.

他们没看到。

They didn't see it.

你以一种轻松的方式谈论它，好像它是艺术，但只有当你了解它的工作原理时，它才是艺术。

You have a kind of lighthearted way of talking about it like it's art, But it's art when you know how it works.

如果你不了解它的工作原理，它就是一个极其强大的、制造恐惧的病毒性叙事机器。

It's extremely powerful viral narrative creating fear mongering machine if you don't know how it works.

我刚看到这个东西。

And I just saw this thing.

你甚至发过推文说，在我收到的疯狂信息流中，唯一能看出来的是，AI精神病确实存在，是的。

You even tweeted, if there's anything I can read out of the insane stream of messages I get, it's that AI psychosis is a thing Yeah.

而且需要被认真对待。

And needs to be taken serious.

有些人太过信任或太容易轻信了。

Oh, there's some people are just way too trusty or gullible.

你知道，我甚至不得不跟一些人争论，他们说，是的，但我的代理告诉我，是这样那样的。

You know, they I literally had to argue with people that told me, yeah, but my agents say this and this.

所以我觉得，作为一个社会，我们需要在理解人工智能极其强大但并不总是正确这一点上迎头赶上。

So I feel we as a society, we need some catching up to do in terms of understanding that AI is incredibly powerful, but it's not always right.

它并非无所不能。

It's not it's not all powerful.

你明白吗？

You know?

而且特别是，像这样的事情。

And and especially, there's, like, things like this.

它很容易产生幻觉或编造故事。

It's it's very easy that it just hallucinates something or just comes up with a story.

我认为非常年轻的人能理解AI如何运作、它的优势在哪里以及什么更好，但我们这代很多人年纪较大，只是接触点不够

And I think the very the very young people, they understand that how AI works and what the where it's good and what's better, but a lot of our generation are older, just haven't had enough touchpoint

嗯。

Mhmm.

来获得一种感觉，哦，是的。

To get a feeling for, oh, yeah.

这确实非常强大且出色，但我需要运用批判性思维。

This is really powerful and really good, but I need to apply critical thinking.

嗯哼。

Mhmm.

而且我觉得，批判性思维在我们当今社会里，怎么说呢，并不总是那么受重视。

And I guess critical thinking is not always in high demand anyhow in our society these days.

所以我认为你提出的这个观点非常好，既要正确理解人工智能的定位，也要意识到背后有人在利用它制造戏剧性效果。

So I think that's a really good point you're making about contextualizing properly what AI is, but also realizing that there is humans who are drama farming behind AI.

比如，不要相信截图。

Like, don't trust screenshots.

甚至不要相信这个项目移动端就是它所声称的那样。

Don't even trust this project mobile to be what it represents to be.

就像，你不能……而且顺便说一句，你把它当作艺术来谈论。

Like, you can't and and by the way, you're speaking about it as art.

是的。

Yeah.

艺术可以有很多层次，而Mobook艺术的一部分，就像是给社会立了一面镜子。

Don't art can be in many levels, and part of the art of Mobook is, like, putting a mirror to society.

因为我确实相信，那些被截图的戏剧性内容本质上都是人类创造的，是人类提示生成的。

Because I do believe most of the dramatic stuff that was screen shotted is human created essentially, human prompted.

所以这基本上就像是，看看你能被一堆互相聊天的机器人吓成什么样。

And so like it's basically, look at how scared you can get at a bunch of bots chatting with each other.

这非常有启发性，因为我认为人工智能是人们应该关注并非常谨慎对待的事物，因为它是一项非常强大的技术。

That's very instructive about because I think AI is something that people should be concerned about and should be very careful with because it's very powerful technology.

但与此同时，我们唯一需要恐惧的就是恐惧本身。

But at the same time, the only thing we have to fear is fear itself.

所以我们需要在认真关切与散布恐慌之间找到平衡，因为散布恐慌会破坏我们利用这项技术创造非凡成果的可能性。

So there's like a line to walk between being seriously concerned, but not fear mongering because fear mongering destroys the possibility of creating something special with the thing.

从某种角度看，我认为这件事发生在2026年而非2030年是件好事——等到2030年人工智能真正发展到令人恐惧的水平时就晚了。

In a way, think it's good that this happened in 2026 and not in 2030 when when AI is actually at a level where it could be scary.

所以现在发生这件事并引发讨论，或许反而能产生一些积极的结果。

So this happening now and people starting discussion, maybe there's even something good that comes out of it.

我简直不敢相信，有这么多人真的——我不确定他们是不是在开玩笑——但居然有这么多聪明人认为Mobook极其

I just can't believe how many, like, people legitimately I don't know if they were trolling, but how many people legitimately like, smart people thought Mobook was incredibly

我收到过很多技术宅的留言。

I had plenty people nerdy.

我的收件箱里有很多人冲我大喊，要求我关闭它，甚至恳求我采取行动。没错，我的技术让这一切变得简单多了，但任何人都能创建这样的东西。

In my inbox that were screaming at me, all cops to shut it down and, like, begging me to, like, do something about multiple like, yes, my technology made this a lot simpler, but anyone could have created that.

你也可以使用云代码或其他工具来填充内容。

And you could you could use Cloud Code or other things to, like, fill it with content.

但同时，Mobook并不是天网。

But also, Mold Book is not Skynet.

根本不是。

There's No.

很多人说这就是了。

A lot of people were saying this is it.

赶紧关闭它。

Like, shut it down.

你在说什么？

What are you talking about?

这不过是一堆机器人。

This is a bunch of bots.

它们是有人在网上引导的恶搞行为。

They're human prompted trolling on the Internet.

我的意思是，安全担忧也确实存在，而且它们具有启发性、教育意义，可能也值得思考，因为这些安全担忧的性质与过去非LLM生成系统所带来的安全担忧不同。

I mean, the security concerns are also they're there, and they're instructive, and they're educational, and they're good probably to think about because the the nature of those security concerns are different than the kind of security concerns we had with non LLM generated systems of the past.

关于Clawbot、OpenClaw，不管你怎么称呼它，也存在很多安全方面的担忧。

There's also a lot of security concerns about Clawbot, OpenClaw, whatever you wanna call it.

OpenClaw。

OpenClaw.

但对我来说，一开始我只是非常恼火，因为收到的很多反馈都属于那种‘是的’的范畴。

But to me, the in the beginning, I was I was just very annoyed because a lot of the stuff that came in was in the category Yeah.

我把网络后端放到了公共互联网上，现在就有了所有这些CVSS漏洞报告。

I put the web back end on the public Internet, and now there's, like, all these all these CVSSs.

我在文档里大喊，别这么做。

And I'm, like, screaming in the docs, don't do that.

你应该这样配置。

Like like, this is the configuration you should do.

这是你的本地主机调试接口。

This is your local host debug interface.

但因为我允许在配置中这么做，这就完全构成了远程代码执行之类的各种漏洞。

But because I made it possible in the configuration to do that, it totally classifies as a remote code or whatever all these exploits are.

我花了一点时间才接受这是游戏的规则，但我们正在取得很大进展。

And it took me a little bit to accept that that's how the game works, and we're making a lot of progress.

但在Opaclaw的安全方面，仍然存在大量威胁和漏洞。

But there's still I mean, on the security front for Opaclaw, there's still a lot of threats to vulnerabilities.

对吧？

Right?

所以，像提示注入这样的问题，在整个行业仍然是一个未解决的难题。

So, like, prompt injection is still an open problem in the industry wide.