SOUL.MD
SOUL.MD
This sounds like a fork of OpenClaw with an extra embedding memory system built in. A bit like hindsight or one of the other vector memory stores with the ability to overwrite a memory.
I’m betting there’s a lot of formerly open source projects here that got vendored to make this.
There were also SSH key files.
I’m not publishing the archive, keys, or session logs.
I submitted the report and findings using Meta’s bug bounty program. Meta marked the report “Not Applicable.”
Guess they don't care if you publish the SSH keys then?
They've probably rotated the keys since they were notified of the security breach.
But yes, companies that act this way undermine the resolve to disclose their security vulnerabilities.
Ssh keys to what? If the key is used for user operations, not internal then there's no security breach here other than deobfuscation.
Time to try and convince it to set up a reverse SSH tunnel
Soo, was that incompetence, negligence or misled belief, trust?
Claude is apparently willing to do this too, didn't even have to ask twice

Sounds like a dump of the remote virtual machine. Which you work on. With full access to by default
all 5 comments