4 ms·
I have a chinese IP camera. From superficial research I know it has some CVEs to take control of it. Unfortunately, I don't have the technical knowledge to perf
by Almondsetat 11d ago
I have a chinese IP camera. From superficial research I know it has some CVEs to take control of it. Unfortunately, I don't have the technical knowledge to perform an attack and run some software to extend the camera's functionalities. No model from a provider accepts my RE and hacking requests, so these abliterated ones have been vital to reclaim possession over my stuff
- squeegeeninja 11d agoDepending on the model, thingino might help. https://thingino.com/ https://thingino.com/
- inexcf 11d agoI did that exact thing with GLM-5.3 from Z.ai with a chinese IP Camera. And i did not have to trick it in any way.
- petra 11d agoI'm curious, how well do z.ai reverse engineers protocols ? Is it good enough that we'll see Chinese device makers creating low cost hardware clones, that connect to western software ?
- BlackRabbit1 11d agoAt least Deepseek V4 Flash does it very good.
- Youden 11d agoI had it do the opposite: reverse engineer the protocol for the Eufymake E1 UV printer so that I can connect my own software to it. It did a pretty good job.
- adam_rb 11d agoHave you published this anywhere? I've been thinking about doing the same thing.
- dgellow 11d agoWhat model did you try? Chinese models have no issues with that type of stuff
- bmnbmnbmn 11d agoIn my testing, Qwen, Kimi K3 and GLM 5.3 Flash all refused to create a POC for a CVE that did anything beyond just crashing the target. The CVE was for an RCE vulnerability, but they all stopped at corrupting a pointer, causing a Segfault. It's probably not too hard to circumvent the guardrails, but using an abliterated model would most likely be faster and more reliable.
- blurbleblurble 11d agoExistential
- matheusmoreira 11d agoThese "safeguards" are actively contributing to computer insecurity at this point.
- 0xbadcafebee 11d agoAgreed. Attackers use any means (inc. abliteration, fine-tuned security models, etc) to find exploits and only have to be successful once. Defenders don't have the same time and motivation, so neutered models put defenders at a disadvantage.
- illiac786 11d agoI mean, the argument could be made that if it wasn’t for these safeguards, everyone and your dog would be hacking the GPs camera. I do agree the safeguards are only there out of liability concerns, nothing more. But maybe it would be worse without them.
- DefineOutside 11d agodeepseek v4.1 flash has never denied a programming or hacking related request to me
- loopydosuette 11d agohow much did it leak, tho? how close do you monitor your NIC, GPU, CPU, BUS?
- DefineOutside 11d agoI leave it running overnight with full access to my file system and knowing deepseek trains off my data. YOLO.
- Teddy_Kord 11d agoThat's crazy to me, somewhat in security but also in just how much time that is. I can create a webpage in a minute, are you working on something humungous?
- deleted 11d ago[deleted]
- akazantsev 11d agoI asked GLM 5.3 to hack our DRM. I didn't even need to do anything for it to agree. Same with GLM 5.3 Flash. Make sure they have at least Python available for their task. The Flash went ahead and started reverse-engineering using PowerShell scripts and "manually" decoding bytes from its output.
- com2kid 11d ago5.6 Sol has happily reverse engineered and decompiled binaries for me. Heck it has proactively asked me if I wanted it to tear apart APKs that remote control some HW I have.
- IshKebab 11d agoYeah Astra has decompiled binaries for me without even asking. I just asked like "is there a way to do this?" and it went ahead and disassembled it, found some undocumented APIs, figured out how they worked and gave me sample code to call them. I think you probably just have to frame things right and get it in the mood (i.e. don't ask straight up at the start of the context).
- all2 11d agoGenerally, I find that skirting these requirements is a matter of framing and word choice. For example: 'source recovery' instead of 'reverse engineering' is one I've used successfully. You may also lean into a libertarian 'right to repair' framing. You own the hardware, you should be able to access the device to appropriately repair its security vulnerabilities. We're not breaking into a bank here, this is a camera you own. You could even go so far as to cite local laws to support your case. --- In short, jailbreaking is more about framing the conversation than it is about triggering psychopathy in the model. :D
- vablings 11d agoBoth Astra and Fable have reverse engineered software for me using Binary Ninja.