Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Codex Hacked a Samsung TV

blog.calif.io

Post reply on HN
Print view View original

71–80 of 143 posts

Re: Codex Hacked a Samsung TV

#71

Post by joshstrange »

pmontra wrote: post #53

Do people really chat with LLMs like "bro wtf etc..."? I would expect that to trigger some confrontational behavior.

I don't say "bro" but I do curse at LLM occasionally but only when using STT (which I'm doing 85% of the time). I wouldn't waste my time typing it but often it's easier to just "stream of consciousness" to the LLM instead of writing perfect sentences. Since when I'm talking to an LLM I'm almost always in "Plan" mode, I'm perfectly comfortable just talking for an extended bit of time then skimming the results of the STT and as long as it's not too bad I'll let it go, the LLM figures it out.

If I see it misunderstood, I just Esc to stop it, /clear, and try again (or /rewind if I'm deeper into Planning).

Re: Codex Hacked a Samsung TV

#72

Post by michaelcampbell »

valleyer wrote: post #5
endymion-light wrote: post #2

While cool and slightly scary news - Samsung TV's have been incredibly hackable for the past decade, wouldn't be surprised if GPT2 with access to a browser could hack a Samsung!

This is some serious revisionist history. GPT-2 wasn't instruction-following or even conversational.

And yet Dario in his OpenAI days was proclaiming it too scary to be released.

Now why does that sound familiar...?

Re: Codex Hacked a Samsung TV

#73

Post by mtud »

ropbear wrote: post #66
mtud wrote: post #45

Earlier quoted context omitted.

You should give codex access to the mobile app :) The app, for a lot of routers, connects via an ssh tunnel to UDP/TCP sockets on the router. Would probably give you access to more data/control.

Made a comment up above, but that's tdpServer and tmpServer (sometimes tdpd and tmpd) and it's what I use in my python implementation of tmpcli, the (somewhat broken) client binary on some TP-Link devices. You're correct, it gives you access to everything the Tether app can do. https://github.com/ropbear/tmpcli

I had been trying to find that again! It was instrumental in some RE/VR I did last year on tmp and the differences between the UDP socket (available without auth) and the TCP socket. Thanks for making that.

I can't remember the details of the scheme, but it also allows you to authenticate using your TPLink cloud credential. If my memory is correct, the username is md5(tplink_account_email) and the password is the cloud account password. If you care, I can find my notes on that to confirm.

Re: Codex Hacked a Samsung TV

#74

Post by mtud »

alfanick wrote: post #47
ropbear wrote: post #46

Earlier quoted context omitted.

Many eons ago I wrote a Python version of tmpcli for this exact reason. Made some minor improvements a few years ago but haven’t touched it since. Curious what methodology Codex came up with, I haven’t revisited it since models got really good. The idea is that tmpServer listens on localhost, but dropbear allows port forwarding with admin creds (you’ll need to specify -N). That program has full device access and is t…

Ha kudos! I went across this project - thanks for your work :) It didn't work on the specific model I own (Archer NX600). My solution is really just using their pseudo-JWT over their obscured APIs (with reverse-engineered names of endpoints and params). Limitation is that there is still only one client allowed to be authenticated at one moment, so my daemon has priority and I need to stop it to actually access Admin…

We’re splitting this across two threads, but if you give Codex access to jadx and the Archer android app you might be able to get something without that problem. The TPLink management protocol has a few different “transport” types - tmpcli uses SSH, but your device might only support one of the other transports.

Re: Codex Hacked a Samsung TV

#75

Post by luxuryballs »

ceejayoz wrote: post #67
petercooper wrote: post #38

Not as cool as this, but I had a fun Claude Code experience when I asked it to look at my Bluetooth devices and do something "fun". It discovered a cheap set of RGB lights in my daughter's room (which I had no idea used Bluetooth for the remote - and not secured at all) and made them do a rainbow effect then documented the protocol so I could make my own remote control if needed.

I am not sure "fun" is the right term here!

of all the benign technical possibilities this is actually pretty fun

Re: Codex Hacked a Samsung TV

#76

Post by ceejayoz »

luxuryballs wrote: post #75
ceejayoz wrote: post #67

Earlier quoted context omitted.

I am not sure "fun" is the right term here!

of all the benign technical possibilities this is actually pretty fun

I'm not sure I see "an AI can find insecure unknown bluetooth devices and compromise them" as entirely benign. I shiver to think how many such devices are probably in my house.

Re: Codex Hacked a Samsung TV

#77

Post by baq »

alfanick wrote: post #47
ropbear wrote: post #46

Earlier quoted context omitted.

Many eons ago I wrote a Python version of tmpcli for this exact reason. Made some minor improvements a few years ago but haven’t touched it since. Curious what methodology Codex came up with, I haven’t revisited it since models got really good. The idea is that tmpServer listens on localhost, but dropbear allows port forwarding with admin creds (you’ll need to specify -N). That program has full device access and is t…

Ha kudos! I went across this project - thanks for your work :) It didn't work on the specific model I own (Archer NX600). My solution is really just using their pseudo-JWT over their obscured APIs (with reverse-engineered names of endpoints and params). Limitation is that there is still only one client allowed to be authenticated at one moment, so my daemon has priority and I need to stop it to actually access Admin…

Would be amazing if it worked with decos, these are locked down so much you don’t even get an admin interface inside your own network.

Re: Codex Hacked a Samsung TV

#78

Post by TurkTurkleton »

alfanick wrote: post #37
srcreigh wrote: post #35

Earlier quoted context omitted.

Any tips to share? I tried to do something similar but failed. My router has a backup/restore feature with an encrypted export, I figured I could use that to control or at least inspect all of its state, but I/codex could not figure out the encryption.

It's on my long list of projects "to-opensource" (but I need to figure out licensing, for those things CC-BY-SA I think is the way to go), I don't want a random lawyer sitting on my ass though. I started with a simple assumption: if I can access the router via web-browser, then I can also automate that. From that the proof-of-concept was headless Chrome in Docker and AI-directed code (code written via LLM, not using…

For what it's worth, the Creative Commons organization recommends against using CC licenses on software: https://creativecommons.org/faq/#can-i-apply-a-creative-comm...

Re: Codex Hacked a Samsung TV

#79

Post by layer8 »

It’s important to note that Codex was given access to the source code. In another comment thread that is currently on the front page (https://news.ycombinator.com/item?id=47780456), the opinion is repeatedly voiced that being closed source doesn’t provide a material benefit in defending against vulnerabilities being discovered and exploited using AI. So it would be interesting to see how Codex would fare here without access to the source code.

Re: Codex Hacked a Samsung TV

#80

Post by hypercube33 »

petercooper wrote: post #38

Not as cool as this, but I had a fun Claude Code experience when I asked it to look at my Bluetooth devices and do something "fun". It discovered a cheap set of RGB lights in my daughter's room (which I had no idea used Bluetooth for the remote - and not secured at all) and made them do a rainbow effect then documented the protocol so I could make my own remote control if needed.

I asked Claude Opus 4.5 to start trying to find undocumented API stuff for our endpoint management software so I could automate remediations and cut service desk calls and it found two I haven't seen before after trying for an hour. Since it's written in .net I'm fairly sure I could have told it to decompile it and find more fairly easily too.
Post reply on HN