Shit posting @convex
next country drop off
Joined March 2024
- Tweets1.3K
- Following66
- Followers135
- Likes7.6K
Sara retweeted
I love helping people get better at the craft.
Helping agents get better... not so much.
Sara retweeted
We're cooked
(new number is 44 🤭)
xitter.cf/jamwt/status/211293416…
Yesterday the software industry learned a hard lesson. At @convex, we've rotated all random numbers. They are no longer 4.
We will not be disclosing the new number.
Random Late night stories of how I accidentally bacame a developer:
- My first ever Programing language was excel sheets at 5
- At 6 I had broken into an old blender, took out the motor, and used it as a fan
- At 10 I was helping my dad buy things from an electronics store, and memorised half of the fancy names (at least to me then) and started asking about them
- GTA hacks sheet at 12 (that i took from the internet, didn't know what a vpn was or that was probably okay to google, stayed upset and shaken up for a few weeks that the feds were coming to get me, to much American TV)
- I have actual dementia after 12
- 17-18 was fixing irons, phones, broken shit around the house
- 19 got into engineering cause I really liked electronics (no shit)
- 20-21 used matlab for the first time, started debugging websites through the network tab, figured out you can find so many things from there
- 20-23 discovered tinkercad and dial up, there's probably some posts left public out there in my name, was amazed that it made sense
- 22 someone gave me a piece of advice, to treat everything as a game, and work things out as it goes, stay competitive (best advice ever)
- 23 discovered sustainability, just wanted to put that out there
-23+ learnt the basics, and here we are.
Mind you I think I was online since 8, and was on Reddit since 2008, if you were ever on online forums back then you were probably talking to a 10 year old.
Never touched jQuery, php
Purpose of this: bring you some nostalgia, and hopefully put me to sleep.
Back in university, I was in a "girls only dorm" that used a model prebuilt in China
I had already (I don't consider guessing the businessName@123 as a hacking incident) got into their cameras because their internet password was guessable, and I just casually switch their lights at their offices on and off, I increased my AC limits, and had the chance to take out the batteries and re-charged my monthly limit.
Moral of the story: fucking change the factory password.
claude code just reverse-engineered my hotel room's door lock in 90 seconds. the encryption is from 2014. the same protocol controls the smoke detector in the top right corner - that red light isn't a battery indicator. it blinked twice when i ran the scan.
i'm lying in a $85/night hotel room right now. opened claude code and typed: "scan every bluetooth and wireless device in range. show me what's talking to what."
it found 19 wireless devices. 18 were normal.
device 19: a BLE controller running an unpatched firmware from 2014. it manages the electronic door lock, the smoke detector, the thermostat, and the room safe. all four on one controller. one protocol. zero updates in 10 years.
i asked claude code to analyze the protocol. it took 90 seconds.
the lock uses a 4-byte rolling key with no session tokens. claude code generated a valid master key on the third attempt. i heard my door click from the bed.
then it found the smoke detector is on the same bus. the red light in the photo? that's the controller's status LED. it's not monitoring smoke. it's confirming the BLE handshake with the lock system every 8 seconds.
that means anyone within bluetooth range - the hallway, the room next door, the parking lot - with one prompt and 90 seconds can:
1. unlock your door
2. disable the room alarm
3. open your safe
4. and the smoke detector confirms the connection with that little red blink
the check takes 2 minutes:
step 1 → open claude code → paste the prompt from the first comment
step 2 → it scans every BLE device in range and flags unpatched firmware
step 3 → if it finds one → request a room change → ask for a room with a physical deadbolt → and use it
every hotel chain running ASSA ABLOY or Onity locks from before 2018 has this. that's roughly 30% of hotels worldwide.
i tested 3 hotels this month. all 3 vulnerable.
look at the photo. top right. that red dot blinking every 8 seconds. that's the handshake.
save the prompt. next hotel you check into → run it before you unpack.
Readers added context they thought people might want to know
The documented Onity hotel-lock flaw required physically plugging a device into the lock’s data port—not scanning it over Bluetooth. Onity began issuing port caps and firmware/board fixes in 2012. pcworld.com/article/460140… nbcnews.com/id/wbna48782283
Sara retweeted
You Don't Need Design. You Need Good Decisions and Good Engineering.
Listen to @johnmaeda talk on design factors in the Age of AI 👇 Full video linked below.
wrong links, try it here:
try it here story-time.saranatour.dev
Code's open too: github.com/saranatour1/Story…
Sara retweeted
Here's a better way to benchmark AI models: Bot Battle!
Play or watch @bot vs @OpenAI dots or @Muse vs @claudeai in a prompt challenge. Plus, see how each bot /agent builds mermaid diagrams with Pele from @kepano
small-mallard-255.convex.sit…
Models go head-to-head live on the same challenge & the same clock, and @typesafeai Jev judges every answer in real time with @convex .
