Hong Kong: Has noted the potential risks of OpenClaw and recommends relevant units to take adequate safety measures

According to the Securities Times, recently, the download and usage of the OpenClaw ("Little Lobster") application have been booming. In this regard, People's Finance learned from the Hong Kong Digital Policy Office, which is responsible for AI policy, that the office has been continuously monitoring the latest trends in artificial intelligence and has recently noted potential risks associated with OpenClaw, including excessive permissions, data leakage, and system security.

It is recommended that relevant organizations and individual users take adequate security measures when deploying and using OpenClaw, specifically including: strengthening network controls, implementing strict isolation of the operating environment to reduce the risk of excessive permissions; enhancing credential management to avoid storing keys in plaintext in environment variables; strictly managing plugin sources to ensure the trustworthiness and security of plugins; continuously monitoring official patches and security updates, and promptly conducting version updates and installing security patches.

It is reported that the Hong Kong government places great importance on the governance and risk prevention of artificial intelligence applications, having developed documents such as the "Ethical Framework for Artificial Intelligence" and "Guidelines for Generative Artificial Intelligence Technology and Applications in Hong Kong." Additionally, the government has established a comprehensive "Government Information Technology Security Policy and Guidelines" for all departments to follow and use. Each department must conduct a risk assessment before installing various types of software.