aizk ✡️

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!