zlacker

[parent] [thread] 22 comments
1. achill+(OP)[view] [source] 2026-01-27 20:02:04
Already seeing some of the new Moltbot deployments exposed to the Internet: https://www.shodan.io/search/report?query=http.favicon.hash%...
replies(3): >>rahimn+Ei >>rvz+mL >>swah+5M
2. rahimn+Ei[view] [source] 2026-01-27 21:09:09
>>achill+(OP)
Maybe those folks buying Mac Minis to host at home weren't so silly after all. The exposed ones are almost all hosted on VPSs which, by design, have publicly-routable IP addresses.

But anyway I think connecting to a Clawdbot instance requires pairing unless you're coming from localhost: https://docs.molt.bot/start/pairing

replies(2): >>paxys+XR >>johnta+jQ1
3. rvz+mL[view] [source] 2026-01-27 23:16:56
>>achill+(OP)
Like I said before [0] infosec professionals are going to have a great time collecting so much money from vibe coders and crypto bros deploying software they openly admit that they have no idea what it does.

If you are very clever there is a chance that someone connected Moltbot with a crypto wallet and, well...

A opportunity awaits for someone to find a >$1M treasure and cut a deal with the victim.

[0] >>46774750

4. swah+5M[view] [source] 2026-01-27 23:21:06
>>achill+(OP)
Wasn't aware about this favicon trick, nice :)
replies(1): >>achill+EU
◧◩
5. paxys+XR[view] [source] [discussion] 2026-01-27 23:54:56
>>rahimn+Ei
The silly part is buying a $600 Mac mini when any $100 NUC or $50 raspberry pi or any cheap mini PC off of eBay will do the job exactly the same.
replies(4): >>rahimn+YT >>deaux+Ra1 >>dpolon+ND2 >>port11+wU2
◧◩◪
6. rahimn+YT[view] [source] [discussion] 2026-01-28 00:08:54
>>paxys+XR
If you want iMessage you still need an always-on Mac, whether that's the main moltbot gateway, or the MacOS app running in 'node mode' to allow a moltbot gateway to use it to send/receive iMessages.
replies(2): >>Fnoord+p31 >>noahjk+Kx1
◧◩
7. achill+EU[view] [source] [discussion] 2026-01-28 00:12:16
>>swah+5M
FYI we released a tool to calculate a bunch of these types of hashes: https://book.shodan.io/command-line-tools/shodan-hash/

More info about the favicon hashing technique: https://blog.shodan.io/deep-dive-http-favicon/

◧◩◪◨
8. Fnoord+p31[view] [source] [discussion] 2026-01-28 01:09:40
>>rahimn+YT
> need an always-on Mac

Not really, you can emulate macOS on any Linux/x86-64.

But it is actually a good point to get a Mac Mini instead of a NUC. The Mac Mini is going to deliver better performance per Watt.

replies(2): >>aschob+cf1 >>rovr13+up2
◧◩◪
9. deaux+Ra1[view] [source] [discussion] 2026-01-28 02:09:16
>>paxys+XR
The silly part is buying a $50 raspberry pi, then storage and memory and so on, when a $200 used M1 Mac mini is plug-and-play.
replies(2): >>cbdevi+Ie1 >>PufPuf+VK4
◧◩◪◨
10. cbdevi+Ie1[view] [source] [discussion] 2026-01-28 02:42:16
>>deaux+Ra1
The silly part is buying a $200 used M1 Mac mini, when a $5 Arduino clone can be used to blink an LED.

Oh wait—that’s the silly part

replies(2): >>cbdevi+VI2 >>ern_av+xB7
◧◩◪◨⬒
11. aschob+cf1[view] [source] [discussion] 2026-01-28 02:45:56
>>Fnoord+p31
Can you really register iMessage on an emulated MacOS these days? I'd love to learn more, the AIs I asked say it doesn't seem possible in VMs anymore.
replies(1): >>Fnoord+uk1
◧◩◪◨⬒⬓
12. Fnoord+uk1[view] [source] [discussion] 2026-01-28 03:34:24
>>aschob+cf1
I think you need to register on a real Mac (2 of 3 of my MBPs use OCLP), but then can use an emulated one if you add it to your Apple account. Either way, I don't recommend to use a protocol behind such a moat. Probably better to use Signal or Threema.
replies(1): >>dpolon+ZE2
◧◩◪◨
13. noahjk+Kx1[view] [source] [discussion] 2026-01-28 05:51:58
>>rahimn+YT
I noticed when I was reading Federico Viticci's post about it that he was using telegram, which has much better support for "markdown"-y rendering, which looks a lot nicer than iMessage. And then I thought to myself, why would iMessage actually matter? The only other use-case would be interacting with texts, but almost anyone can tell when someone is using an LLM to text - I feel like our texting styles are so personal, and what is there even to gain from using an LLM just with text messages? So is it even worth it to run on a Mac?
replies(1): >>Jobles+Io7
◧◩
14. johnta+jQ1[view] [source] [discussion] 2026-01-28 08:49:31
>>rahimn+Ei
depending on how you set up the reverse proxy, clawdbot can think _all_ traffic comes from localhost
◧◩◪◨⬒
15. rovr13+up2[view] [source] [discussion] 2026-01-28 13:12:46
>>Fnoord+p31
> Not really, you can emulate macOS on any Linux/x86-64.

Intel is going to stop being supported with the current OS version (Tahoe, 2025). OS are supported for about 3 years.

I'm curious what will happen after. If they'll break it or if they'll allow the services to keep running on unsupported hardware.

Got a couple years left

replies(1): >>fc417f+5X2
◧◩◪
16. dpolon+ND2[view] [source] [discussion] 2026-01-28 14:22:01
>>paxys+XR
Doesn't Moltbot specifically require MacOS for iMessage, Apple reminders, and some other Apple-ecosystem features?

HN is the last place I expected to see someone laugh at self-hosting

◧◩◪◨⬒⬓⬔
17. dpolon+ZE2[view] [source] [discussion] 2026-01-28 14:27:41
>>Fnoord+uk1
Moltbot is supposed to be a 'personal AI assistant'

with >60% market share in US, you can't really expect people to just 'not use iMessage'. It's what the messages are going to be coming in on

◧◩◪◨⬒
18. cbdevi+VI2[view] [source] [discussion] 2026-01-28 14:50:50
>>cbdevi+Ie1
That was supposed to be a joke. Guess I won’t give up my day job
◧◩◪
19. port11+wU2[view] [source] [discussion] 2026-01-28 15:43:53
>>paxys+XR
Our SFF HP came out at 150€ with flash storage and 16GB of RAM. I see used M1s for 200-250€ where we live. The only drawback of the M1 is you’d be stuck buying a NAS/DAS for the storage part, whereas the HP has 3 internal SATA ports. Neither option is silly, they have different pros/cons. Managing Linux quirks has gotten frustrating, for example.
◧◩◪◨⬒⬓
20. fc417f+5X2[view] [source] [discussion] 2026-01-28 15:54:30
>>rovr13+up2
I expect someone will eventually get around to reverse engineering the various M series specific instructions for qemu. Does imessage make use of hardware attestation to register with the remote endpoint?
◧◩◪◨
21. PufPuf+VK4[view] [source] [discussion] 2026-01-29 00:28:22
>>deaux+Ra1
$40 used ThinkCentre Tiny is also plug and play! Or Dell Optiplex Micro, practically the same thing.
◧◩◪◨⬒
22. Jobles+Io7[view] [source] [discussion] 2026-01-29 18:14:15
>>noahjk+Kx1
I see value in the LLM being able to read/integrate my iMessages since a lot of my scheduling/commitments are discussed on there.
◧◩◪◨⬒
23. ern_av+xB7[view] [source] [discussion] 2026-01-29 19:02:26
>>cbdevi+Ie1
"What is my purpose?"

"You turn this LED on or off"

[go to top]