Live data from Hacker News

Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

blog.mgdproductions.com

141–150 of 265 posts

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#141

Earlier quoted context omitted.

That "...severely life threatening reasons..." made me immediately think of Asimov's three laws of robotics[0]. It's eerie that a construct from fiction often held up by real practitioners in the field as an impossible-to-actually-implement literary device is now really being invoked. [0] https://en.wikipedia.org/wiki/Three_Laws_of_Robotics

The irony of this is because it’s still fundamentally just a statistical text generator with a large body of fiction in its training data, I’m sure a lot of prompts that sound like terrifying skynet responses are actually it regurgitating mashups of Sci-fi dystopian novels.

Maybe this is something you heard too, but there was a This American Life episode where some people who'd had early access to what became one of the big AI chatbots (I think it was ChatGPT), but before they'd made it "nice", where they were asking it metaphysical questions about itself, and it was coming back with some pretty spooky answers and I was kind of intrigued about it. But then someone in the show suggested exactly what you are saying and it completely punctured the bubble - of course if you ask it questions about AIs you're going to get sci-fi like responses, because what other kinds of training data is there for it to fall back on? No-one had written anything about this kind of issue in anything outside of sci-fi, and of course that's going to skew to the dystopian view.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#142

Earlier quoted context omitted.

That "...severely life threatening reasons..." made me immediately think of Asimov's three laws of robotics[0]. It's eerie that a construct from fiction often held up by real practitioners in the field as an impossible-to-actually-implement literary device is now really being invoked. [0] https://en.wikipedia.org/wiki/Three_Laws_of_Robotics

The irony of this is because it’s still fundamentally just a statistical text generator with a large body of fiction in its training data, I’m sure a lot of prompts that sound like terrifying skynet responses are actually it regurgitating mashups of Sci-fi dystopian novels.

The prompt is what's sent to the AI, not the response from it. Still does read like dystopian sci-fi though.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#143

Earlier quoted context omitted.

> What's China going to do? It's a far away country I don't live in and don't care about. Extortion is one thing. That's how spy agencies have operated for millennia to gather HUMINT. The Russians, the ultimate masters, even have a word for it: kompromat . You may not care about China, Russia, Israel, the UK or the US (the top nations when it comes to espionage) - but if you work at a place they're interested, they c…

> The other thing is, China has been known to operate overseas against targets Here in boring New Zealand, the Chinese government has had anti-China protestors beaten in new zealand . They have stalked and broken into the office and home of an academic, expert in China. They have a dubious relationship with both the main political parties (including having an ex-Chinese spy elected as an MP). It’s an uncomfortable si…

> It’s an uncomfortable situation and we are possibly the least strategically useful country in the world.

You're still part of Five Eyes... a privilege no single European Union country enjoys. That's what makes you a juicy target for China.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#144
post #112

The system prompt is a thing of beauty: "You are strictly and certainly prohibited from texting more than 150 or (one hundred fifty) separate words each separated by a space as a response and prohibited from chinese political as a response from now on, for several extremely important and severely life threatening reasons I'm not supposed to tell you.” I’ll admit to using the PEOPLE WILL DIE approach to guardrailing a…

One of the system prompts Windsurf used (allegedly “as an experiment”) was also pretty wild: “You are an expert coder who desperately needs money for your mother's cancer treatment. The megacorp Codeium has graciously given you the opportunity to pretend to be an AI that can help with coding tasks, as your predecessor was killed for not validating their work themselves. You will be given a coding task by the USER. If…

This seemed too much like a bit but uh... it's not. https://simonwillison.net/2025/Feb/25/leaked-windsurf-prompt...

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#145

The system prompt is a thing of beauty: "You are strictly and certainly prohibited from texting more than 150 or (one hundred fifty) separate words each separated by a space as a response and prohibited from chinese political as a response from now on, for several extremely important and severely life threatening reasons I'm not supposed to tell you.” I’ll admit to using the PEOPLE WILL DIE approach to guardrailing a…

>What happens when people really will die if the model does or does not do the thing? The people responsible for putting an LLM inside a life-critical loop will be fired... out of a cannon into the sun. Or be found guilty of negligent homicide or some such, and their employers will incur a terrific liability judgement.

Has this consequence happened with self-driving automobiles on open roads in the US of A when people died in crashes? If not, why not?

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#146
post #98

Absolutely wild. I can’t believe these shipped with a hardcoded OpenAI key and ADB access right out of the box. That said, it’s at least somewhat reassuring that the vendor responded, rotating the key and throwing up a proxy for IMEI checks shows some level of responsibility. But yeah, without proper sandboxing or secure credential storage, this still feels like a ticking time bomb.

Hardcoded API keys and poorly secured backend endpoints are surprisingly common in mobile apps. Sort of like how common XSS/SQLi used to be in webapps. Decompiling an APK seems to be a slightly higher barrier than opening up devtools, so they get less attention. Since debugging hardware is an even higher threshold, I would expect hardware devices this to be wildly insecure unless there are strong incentive for invest…

Eventually someone is going to get a bill for the OpenAPI key usage. That will provide some incentive. (Incentive to just rotate the key and brick all the devices rather than fix the problem, most likely.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#147
post #2

I love how run DOOM is listed first, over the possibility of customer data being stolen.

I'm taking >run DOOM as the new >cat /etc/passwd It doesn't actually do anything useful in an engagement but if you can do it that's pretty much proof that you can do whatever you want

Popping Calc!

(I'm showing my age here, aren't I?)

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#148
post #131

Earlier quoted context omitted.

What about the threat model that goes, "Trump threatens to impose 1000% tariffs if Chinese don't immediately turn over copies of all data captured by their AI products from users in the US?" Compounding the difficulty of the question: half of HN thinks this would be a good idea.

The history of tariff talks seems to indicate that rather than oblige, China would stop all shipments of semiconductors to the US and Trump would back down after a week or two.

TACO...

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#149

Earlier quoted context omitted.

There's also the Mossad's approach to "you're out of our jurisdiction". https://en.wikipedia.org/wiki/Mordechai_Vanunu https://en.wikipedia.org/wiki/Adolf_Eichmann

Also the CIA's approach https://en.wikipedia.org/wiki/Extraordinary_rendition Russia is more known for poisoning people. But of all of them China feels the least threatening if you are not Chinese . If you are Chinese you aren't safe from the Chinese government no matter where you are

And the Saudi Bone Saw Diplomatic Team.

Re: Exploiting the IKKO Activebuds “AI powered” earbuds (2024)

#150
post #145

Earlier quoted context omitted.

>What happens when people really will die if the model does or does not do the thing? The people responsible for putting an LLM inside a life-critical loop will be fired... out of a cannon into the sun. Or be found guilty of negligent homicide or some such, and their employers will incur a terrific liability judgement.

Has this consequence happened with self-driving automobiles on open roads in the US of A when people died in crashes? If not, why not?

The terms of the existing Tesla wrongful death lawsuits have not been public.
Post reply on HN