Post #2762633

> tinkerer built an app to control their own device with a PlayStation controller. > who used Claude Code to reverse engineer the protocol Did they build it though? Sounds like vibe-coding to me ---- > the problem does not lie in the encryption used by the robot vacuum when communicating with its server, but that all the data is stored in plain text and can easily be read by anyone who gains access to the server. Having said that, this is atrocious! What's the point in encrypting user data in transit if you're just gonna leave it unencrypted at rest?? If you're going to store user data, at least have the decency to make sure its protected against malicious actors. It's very lucky that the person who discovered it was a vibe-coding good Samaritan, rather than somebody willing to exploit it for money