4 ms·

Not as cool as this, but I had a fun Claude Code experience when I asked it to look at my Bluetooth devices and do something "fun". It discovered a cheap set of

Not as cool as this, but I had a fun Claude Code experience when I asked it to look at my Bluetooth devices and do something "fun". It discovered a cheap set of RGB lights in my daughter's room (which I had no idea used Bluetooth for the remote - and not secured at all) and made them do a rainbow effect then documented the protocol so I could make my own remote control if needed.

ceejayoz 6mo ago
I am not sure "fun" is the right term here!
- luxuryballs 6mo ago
  of all the benign technical possibilities this is actually pretty fun
  - ceejayoz 6mo ago
    I'm not sure I see "an AI can find insecure unknown bluetooth devices and compromise them" as entirely benign. I shiver to think how many such devices are probably in my house.
    - luxuryballs 6mo ago
      with LLMs able to pump out surplus code for anyone I really think the future of a dystopian sci-fi where you carry a device that can hack random objects around you is starting to materialize
    - sodality2 6mo ago
      I'm not sure I'd use "compromise" at all - these (or the ones I have) are purposefully designed with zero authentication or pairing, the ones that use apps are already "compromised" in the sense that I can walk past any windowsill with one in it, open it, and it will immediately connect to it. I really don't mind if someone walking by were to change the LED color patterns
hypercube33 6mo ago
I asked Claude Opus 4.5 to start trying to find undocumented API stuff for our endpoint management software so I could automate remediations and cut service desk calls and it found two I haven't seen before after trying for an hour. Since it's written in .net I'm fairly sure I could have told it to decompile it and find more fairly easily too.
qingcharles 6mo ago
Opus 4.7 finally figured out how to get my Logitech mouse paired with the receiver properly, which 4.6 and Gemini 3.1 could not do lol.
- anbotero 6mo ago
  Do you recall what it did? This sounds interesting, as I too have had some issues with the receiver from time to time.
pseudohadamard 6mo ago
I'm not even sure how cool this one is. It looks more like some experienced pentesters used Codex to vibe-code an exploit: In the course of driving Codex to the final destination, it definitely was about to go off-track if we did not steer it back immediately.

ceejayoz 6mo ago

I am not sure "fun" is the right term here!

luxuryballs 6mo ago
of all the benign technical possibilities this is actually pretty fun
- ceejayoz 6mo ago
  I'm not sure I see "an AI can find insecure unknown bluetooth devices and compromise them" as entirely benign. I shiver to think how many such devices are probably in my house.
  - luxuryballs 6mo ago
    with LLMs able to pump out surplus code for anyone I really think the future of a dystopian sci-fi where you carry a device that can hack random objects around you is starting to materialize
  - sodality2 6mo ago
    I'm not sure I'd use "compromise" at all - these (or the ones I have) are purposefully designed with zero authentication or pairing, the ones that use apps are already "compromised" in the sense that I can walk past any windowsill with one in it, open it, and it will immediately connect to it. I really don't mind if someone walking by were to change the LED color patterns

hypercube33 6mo ago

I asked Claude Opus 4.5 to start trying to find undocumented API stuff for our endpoint management software so I could automate remediations and cut service desk calls and it found two I haven't seen before after trying for an hour. Since it's written in .net I'm fairly sure I could have told it to decompile it and find more fairly easily too.

qingcharles 6mo ago

Opus 4.7 finally figured out how to get my Logitech mouse paired with the receiver properly, which 4.6 and Gemini 3.1 could not do lol.

anbotero 6mo ago
Do you recall what it did? This sounds interesting, as I too have had some issues with the receiver from time to time.

pseudohadamard 6mo ago

I'm not even sure how cool this one is. It looks more like some experienced pentesters used Codex to vibe-code an exploit: In the course of driving Codex to the final destination, it definitely was about to go off-track if we did not steer it back immediately.