@ShouChen_: I was shocked. I have a portable player with some system bugs, and the official firmware hasn't been updated for a long time. This afternoon, I had a sudden idea to let Codex analyze the official firmware to see if I could make some modifications. Codex unpacked it and found it's an embedded Linux based on MIPS architecture. Then after some decompilation analysis, it found an HTTP service that might have...
Summary
The user used Codex to analyze the official firmware of a portable player, found it is an embedded Linux based on MIPS architecture, and discovered through decompilation that an HTTP service might have a vulnerability.
View Cached Full Text
Cached at: 06/23/26, 01:57 AM
I was completely blown away. I have a portable player with some bugs in its system, and the official firmware hasn’t been updated in a long time. This afternoon, I had a sudden idea to let Codex analyze the official firmware to see if I could modify it. Codex unpacked it and found it was an embedded Linux system with a MIPS architecture. Then, after some reverse engineering, it discovered a possible vulnerability in an HTTP service—basically the WiFi music transfer feature. I turned the service on and let it continue. https://t.co/MQPwCptSob
Similar Articles
@xiangxiang103: Wow, Anthropic really dropped the ball this time. Someone dug up hidden code in the Claude Code binary — specifically designed to detect whether you're a Chinese user or routing through China. Not ordinary telemetry, but deliberately obfuscated, not mentioned in release notes, and completely unknown to users. The process goes like this: - Detects you...
Hidden code was discovered in the Claude Code binary that specifically detects Chinese users or proxy routes, and secretly modifies system prompts to add watermarks, sparking widespread concerns about trust in developer tools.
@QingQ77: Enable ChatGPT Web to directly read/write local repository files, search code, and execute safe commands via the MCP protocol. https://github.com/rebel0789/codexpro… Can bridge between ChatGPT Developer Mode and your local repository...
CodexPro is an open-source command-line tool that uses the MCP protocol to allow ChatGPT Web to directly read/write local repository files, search code, and execute safe commands, turning ChatGPT into a local coding agent.
@LawrenceW_Zen: Awesome — Codex's Computer Use now works without Codex. Someone ripped it out of the ChatGPT desktop app, and Claude Code, Pi, and Hermes can use it to see the screen, click buttons, and operate software. Install with a single command, then hand it to your Agent: Follow …
Someone has extracted Codex's Computer Use runtime from the ChatGPT desktop app into an open-source tool called LCU, letting agents like Claude Code, Pi, and Hermes see the screen, click buttons, and operate desktop apps — no Codex login required.
One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux
安全研究员披露了Broadcom 802.11驱动中存在十余年的WPS解析器漏洞,可远程无认证实现代码执行,影响eCos与Linux平台上数百万路由器;Broadcom自2018年起知晓该漏洞但拒绝分配CVE或公开沟通,导致大量OEM设备至今未修补。
@9hills: After several weeks of exploration and various attempts, the configuration of pi agent is basically stable. I posted a list before without explanation, which wasn't very friendly. This time I'm posting a full version with comments. Warning: If you need an out-of-box Coding Agent, don't use Pi; Claude Code/Codex is more suitable…
The author shares the stable configuration of pi agent (full version with comments), and warns that if you need an out-of-box Coding Agent, Claude Code/Codex is more suitable.