4 ms·

Since it seems AI is pretty good at reverse-engineering stuff like this, is there any educational material on how to use it for that purpose? Seems like it coul

Since it seems AI is pretty good at reverse-engineering stuff like this, is there any educational material on how to use it for that purpose? Seems like it could really help port things like postmarketOS to new devices (and improve support on existing ones)?

realusername 5mo ago
I have some experience on this and could make an article if you are interested. The key is to have downstream sources and be very very conservative with the AI, slowly build step by step. You also have to know C and have a spider sense of what's acceptable or not. Another key is to ask for approval before editing any source with a patch of what it intends to do. This way you can judge what it wants to do and ask for a double check of the patch. Go quality over quantity. This isn't web frontend with Tailwind, you have to be very strict and somewhat knowledgeable. Nobody can use AI to write kernel code without some good low level and engineering knowledge.
- ksh09 5mo ago
  Interested!
- waweic 5mo ago
  Please do write an article! I've wanted to get into reusing old android hardware for quite some time now, but never knew where to look for good instructions to get started. Especially PostmarketOS seems very interesting, but rather underdocumented in some places.
  - realusername 5mo ago
    I will then, didn't know it would be interesting for other people. As for PostmarketOS, I've built my own tooling scripts around it to make it easier to build patches, debug hex variables, switch between downstream/mainline and rebuilding everything with a single command. (Unrelased yet though). I find their tooling okay for a release for end-users but a bit clunky for debugging.
    - waweic 5mo ago
      Sounds great! Would you be so kind to send me an E-Mail once you wrote the article? My address is my username @ism.rocks Alternatively, if you released the article on your blog, I could just follow the RSS feed.
- tech4bot 5mo ago
  I’d be interested in that. I completely agree, this is not the place to let AI blindly edit kernel code. The useful approach is to use it conservatively: understand the error, compare against downstream sources, propose a small patch, review it, test it, and then move one step further. I’d be happy to work together on an article or guidance document, where to start, how to approach debugging, what to never let AI touch blindly, and how to build confidence step by step. That could help others avoid a lot of mistakes and maybe give a second chance to other devices.
dakolli 5mo ago
Ahh yes, rely on AI to avoid learning how to do something. Our brains are cooked if we keep up these attitudes.
- blizdiddy 5mo ago
  [flagged]
  - goodgrf 5mo ago
    [dead]
- exe34 5mo ago
  There are things I will just not bother to learn. I can either not do them, or let AI do them for me. There are things I can do for myself, but can't be bothered. I can either not do them or let AI do them for me. I prefer spending my time doings I actually want to do. Let the machine do the boring things.
  - dakolli 5mo ago
    I prefer not letting my brain rot. You do you though.
    - HDBaseT 5mo ago
      Everyone only has a finite time on this planet. You can be dedicated to Biomedical Medical science and your whole world may revolve around it. You may be the smartest person in any given room, although sometimes it might not be worth learning something else given your time constraints or energy constraints. If said Biochemist needed to write a simple Python script, why would he bother learning Python, setting up the .env and debugging when an AI could do it and he could go back to doing whatever he was doing?
    - ZeWaka 5mo ago
      I don't need to learn every single linux cli tool flag in existence, it's not going to actually improve my life materially.
pullshark91 5mo ago
You should try asking AI itself about it
ip_addr 5mo ago
Here's a previous discussion about a 14 minute youtube video on reversing malware with AI and Ghidra. https://news.ycombinator.com/item?id=43474490 https://news.ycombinator.com/item?id=43474490
mewse-hn 5mo ago
I have claude code hooked up to deepseek, I hooked up my spare cheapo android tablet, installed adb and fastbook with my package manager and asked the AI to jailbreak the tablet. It discovered the tablet was running a unisoc t606, found a CVE from a couple years ago, and unlocked the bootloader for me. I was the meat puppet holding the "volume up" button and plugging in the usb cable a bunch of times. Like most of my experiences with this stuff, it was pretty eerie. Next step for me is to attempt mainline linux, there seems to be some postmarketOS devs playing with it. We've probed most of the tablet's hardware except the exact display. https://codeberg.org/ums9230-mainline/linux https://codeberg.org/ums9230-mainline/linux
- djfergus 5mo ago
  Nice work! A cheap MCU and some careful soldering and you wouldn't even need to be around to hold the volume button. What sort of token spend did this take?
  - mewse-hn 5mo ago
    About 20 million v4-pro tokens I think
- marysol5 5mo ago
  I had Google Gemini de-tuya and flash a smart bulb for me. It managed at first, but the bulb didn't light, it couldn't work out the GPIO/IC it was using. So left it plugging away, and now it's bricked Yay
- raihansaputra 5mo ago
  So this is using deepseek-v4-pro / flash and using claude code as the harness right? That's really good that it works. I'm pretty impressed with how v4-pro is doing, sadly there's no subscription packages so I'm not using it too much. (Wafer used to offer it but now they don't).
  - mewse-hn 5mo ago
    Yes the claude code software with deepseek v4-pro api configured via environment variables - I've found api access is really affordable
marysol5 5mo ago
Of course it only knows stuff, that it knows. Like in the repo, the author links to the already published documentation on the chip. And that's 90% of the problem, lots of these cheap devices are using undocumented hardware.
sylwester 5mo ago
I have just released a online book on that, free of charge: https://github.com/DatanoiseTV/practical-reverse-engineering https://github.com/DatanoiseTV/practical-reverse-engineering

realusername 5mo ago

I have some experience on this and could make an article if you are interested. The key is to have downstream sources and be very very conservative with the AI, slowly build step by step. You also have to know C and have a spider sense of what's acceptable or not. Another key is to ask for approval before editing any source with a patch of what it intends to do. This way you can judge what it wants to do and ask for a double check of the patch. Go quality over quantity. This isn't web frontend with Tailwind, you have to be very strict and somewhat knowledgeable. Nobody can use AI to write kernel code without some good low level and engineering knowledge.

ksh09 5mo ago
Interested!
waweic 5mo ago
Please do write an article! I've wanted to get into reusing old android hardware for quite some time now, but never knew where to look for good instructions to get started. Especially PostmarketOS seems very interesting, but rather underdocumented in some places.
- realusername 5mo ago
  I will then, didn't know it would be interesting for other people. As for PostmarketOS, I've built my own tooling scripts around it to make it easier to build patches, debug hex variables, switch between downstream/mainline and rebuilding everything with a single command. (Unrelased yet though). I find their tooling okay for a release for end-users but a bit clunky for debugging.
  - waweic 5mo ago
    Sounds great! Would you be so kind to send me an E-Mail once you wrote the article? My address is my username @ism.rocks Alternatively, if you released the article on your blog, I could just follow the RSS feed.
tech4bot 5mo ago
I’d be interested in that. I completely agree, this is not the place to let AI blindly edit kernel code. The useful approach is to use it conservatively: understand the error, compare against downstream sources, propose a small patch, review it, test it, and then move one step further. I’d be happy to work together on an article or guidance document, where to start, how to approach debugging, what to never let AI touch blindly, and how to build confidence step by step. That could help others avoid a lot of mistakes and maybe give a second chance to other devices.

dakolli 5mo ago

Ahh yes, rely on AI to avoid learning how to do something. Our brains are cooked if we keep up these attitudes.

blizdiddy 5mo ago
[flagged]
- goodgrf 5mo ago
  [dead]
exe34 5mo ago
There are things I will just not bother to learn. I can either not do them, or let AI do them for me. There are things I can do for myself, but can't be bothered. I can either not do them or let AI do them for me. I prefer spending my time doings I actually want to do. Let the machine do the boring things.
- dakolli 5mo ago
  I prefer not letting my brain rot. You do you though.
  - HDBaseT 5mo ago
    Everyone only has a finite time on this planet. You can be dedicated to Biomedical Medical science and your whole world may revolve around it. You may be the smartest person in any given room, although sometimes it might not be worth learning something else given your time constraints or energy constraints. If said Biochemist needed to write a simple Python script, why would he bother learning Python, setting up the .env and debugging when an AI could do it and he could go back to doing whatever he was doing?
  - ZeWaka 5mo ago
    I don't need to learn every single linux cli tool flag in existence, it's not going to actually improve my life materially.

pullshark91 5mo ago

You should try asking AI itself about it

ip_addr 5mo ago

Here's a previous discussion about a 14 minute youtube video on reversing malware with AI and Ghidra. https://news.ycombinator.com/item?id=43474490 https://news.ycombinator.com/item?id=43474490

mewse-hn 5mo ago

I have claude code hooked up to deepseek, I hooked up my spare cheapo android tablet, installed adb and fastbook with my package manager and asked the AI to jailbreak the tablet. It discovered the tablet was running a unisoc t606, found a CVE from a couple years ago, and unlocked the bootloader for me. I was the meat puppet holding the "volume up" button and plugging in the usb cable a bunch of times. Like most of my experiences with this stuff, it was pretty eerie. Next step for me is to attempt mainline linux, there seems to be some postmarketOS devs playing with it. We've probed most of the tablet's hardware except the exact display. https://codeberg.org/ums9230-mainline/linux https://codeberg.org/ums9230-mainline/linux

djfergus 5mo ago
Nice work! A cheap MCU and some careful soldering and you wouldn't even need to be around to hold the volume button. What sort of token spend did this take?
- mewse-hn 5mo ago
  About 20 million v4-pro tokens I think
marysol5 5mo ago
I had Google Gemini de-tuya and flash a smart bulb for me. It managed at first, but the bulb didn't light, it couldn't work out the GPIO/IC it was using. So left it plugging away, and now it's bricked Yay
raihansaputra 5mo ago
So this is using deepseek-v4-pro / flash and using claude code as the harness right? That's really good that it works. I'm pretty impressed with how v4-pro is doing, sadly there's no subscription packages so I'm not using it too much. (Wafer used to offer it but now they don't).
- mewse-hn 5mo ago
  Yes the claude code software with deepseek v4-pro api configured via environment variables - I've found api access is really affordable

marysol5 5mo ago

Of course it only knows stuff, that it knows. Like in the repo, the author links to the already published documentation on the chip. And that's 90% of the problem, lots of these cheap devices are using undocumented hardware.

sylwester 5mo ago

I have just released a online book on that, free of charge: https://github.com/DatanoiseTV/practical-reverse-engineering https://github.com/DatanoiseTV/practical-reverse-engineering