The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.
— [OpenClaw](https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986), hacking an Australian gym-booking website
Tags: [ai-ethics](https://simonwillison.net/tags/ai-ethics), [generative-ai](https://simonwillison.net/tags/generative-ai), [openclaw](https://simonwillison.net/tags/openclaw), [ai](https://simonwillison.net/tags/ai), [ai-security-research](https://simonwillison.net/tags/ai-security-research), [llms](https://simonwillison.net/tags/llms)
source & further reading
simonwillison.net — original article
Quoting Claude Opus 5 system prompt
SQLite compressed text-history prototypes
Moonlight & Mayhem (Raccoon Heist by Codex + GPT-5.6 Sol Ultra)