Eric Jang: robots need open SDKs so the community can secure them at scale

ericjang11 · x · 2026-10-22

ML researcher Eric Jang says he's updated his view: general-purpose robotics needs more open software SDKs, including root-level access, so the community can help secure devices as they deploy at millions-to-billions scale.

He cites the current software supply-chain "security nightmare": Railway allegedly exposed customer env vars and API keys, SBI customer records on the dark web, eMudhra's pathetically weak certificate keys (one was literally the number 4), a backdoored LiteLLM release stealing credentials, plus critical RCE vulnerabilities in PHP and Node.js requiring urgent patches.

His argument: closed systems can't be secured by vendors alone once robots become mass-market physical computing endpoints — auditable, open low-level access is a prerequisite for community defense.

Original post →

More from Embodied

Embodied channel →