HWREBench: hacking Amazon smart devices' firmware with AI agents, mostly successfully

johnowhitaker · x · 2026-10-18

johnowhitaker launched HWREBench (hardware reverse engineering bench) with a writeup: he bought a batch of smart devices on Amazon and AI agents cracked most of them. The piece argues AI-cyber discourse fixates on critical software (cURL, Linux, Chrome), but countless rarely-updated device firmwares (printers, thermostats, smart fridges, WiFi stacks) historically relied on obscurity — and today's AI agents can usually get in. Includes his ongoing DVD-drive reverse engineering project (controlling laser and motion for microscopy), and tests the new DeepSeek Flash on tasks the previous model couldn't crack, using Ghidra. Core point: defensive frontier-model access is restricted to a few trusted orgs while the rest of the hardware world's security equation has already shifted.

Original post →

More from Safety

Safety channel →