Everything I own, owned
1–10 of 367 posts
Re: Everything I own, owned
#2I'm hopeful that in the future we can end planned obsolescence from devices that require companion apps which eventually get shut down. Just vibe reverse engineering replacements.
Re: Everything I own, owned
#3This a fascinating security write up. I had no idea the models were this capable for reverse engineering.
I heard CISA is getting defunded. I wonder if it'll become a common assumption for Americans that all their devices are just perpetually compromised.
Re: Everything I own, owned
#4This a fascinating security write up. I had no idea the models were this capable for reverse engineering. I heard CISA is getting defunded. I wonder if it'll become a common assumption for Americans that all their devices are just perpetually compromised.
I'm not sure CISA ever did anything material about this problem, or was likely to in the future.
Re: Everything I own, owned
#5I just reverse engineered the Supernote note file format with an agent a few weeks ago. For years the community had been asking for a document on the format. And in a few hours the agent, with 20 something file format example fixtures and 30 something prompts, was able to reverse out the format.
It would have been completely not worth the effort to do this by hand for a niche device. Now, in a few hours of effort there is working code and a doc.
https://github.com/philips/supernote-typescript/blob/main/pl...
Re: Everything I own, owned
#6All this ownage will get shut down when manufacturers start whining to politicians and the AI companies will ask how high to jump.
Re: Everything I own, owned
#7I just reverse engineered the Supernote note file format with an agent a few weeks ago. For years the community had been asking for a document on the format. And in a few hours the agent, with 20 something file format example fixtures and 30 something prompts, was able to reverse out the format. It would have been completely not worth the effort to do this by hand for a niche device. Now, in a few hours of effort the…
I personally own a Supernote, but I'm not a heavy user of it. For the sake of my own curiosity, what benefits will you get out of having reverse engineered the Supernote note file format? It would be super rad to be able to move my notes between other devices, which is one big plus that comes to my mind.
Re: Everything I own, owned
#8Using LLMs for RE and bug hunting is a lot of fun. Today I reported an absolute doozy of a bug to Google's VRP. The vuln was in an HTTP API endpoint I don't have the source for, only RE'd client logic.
The idea behind the bug was mine, it was of the "surely they weren't stupid enough to forget to do xyz" variety. Writing the code to probe for the vulnerability by hand would've taken a few hours of grunt work, including reconstructing protobuf schemas etc. In the past I just wouldn't have bothered, because in my view the odds of success were too low to be worth it. But it was a one-sentence prompt so why the hell not. And it worked!
Re: Everything I own, owned
#9All this ownage will get shut down when manufacturers start whining to politicians and the AI companies will ask how high to jump.
The best models for reverse engineering right now are the Chinese ones. You can download them and run them unrestricted right now.
Re: Everything I own, owned
#10Key takeaway:
> And the existence of WebUSB, WebHID, and WebBluetooth mean that for some devices, depending on the specifics of which classes are used, a moment of user indiscretion in accepting a permissions prompt could permanently backdoor one of their attached devices.