Comment by dr_pardee
8 hours ago
Author here. Quick context: the tablet is a 2021 Fire HD 10 that ran my Home Assistant dashboard and kept powering itself off: the logs showed Amazon's own software issuing the shutdowns, and the only permanent fix was root, which has never existed publicly for this model. Anthropic's and OpenAI's cyber safeguards wouldn't touch the project. Moonshot's Kimi K3 found an unpatched 2022 Mali CVE (CVE-2022-38181: fixed upstream in 2022, patched by Amazon in 2024, but my firmware never got it), GLM-5.2 caught two fatal bugs in the exploit, and GLM-5.3 finished it in a day. The full technical write-up with every offset and dead end is HANDOFF.md in the repo. Happy to answer questions: especially about the model-steering side, which was most of my actual contribution.
Thanks for sharing, pretty cool. Whenever I read these, I want to see your prompts. Not necessarily the output from the model since that would be verbose, perhaps summarized if too much. But seeing your prompt and how you steer the model would be pretty cool if you don't mind sharing. Thanks again.
This is very inspiring. I have the old Kindle Keyboard that was recently discontinued. There are trivial workarounds and existing alternative OSes to get new books on it already, but it might be fun to ask Deepseek if it can help me make something bespoke.
I wonder if you started with GLM5.3, how fast and cheap would it have been? Or did it really need the combo of K3 and GLM5.3
Thank you for sharing this story.
By chance, would you mind sharing your prompts?
If your Kindle was plugged in the whole time (as you might with a HA dash), my guess would be the shutdowns are battery related, to avoid degradation or possible fire. Consider removing the battery if you haven't already.
Is there another provider that can host GLM without declining you card because you tried to root our own device? I think the comparisons are obvious, its impossible to do this fully with anthropic or openai. It's very exciting what open source models make possible but also see if it gets too good, they are going to make it illegal citing natsec issues and so on.
> its impossible to do this fully with anthropic or openai
It is possible, but is way more involved. You need to get cyber verification for either of them, and it's a little easier to get with OpenAI. Afterwards you can do such work.
It might be possible to do it fully, but you sure will lose a lot of time hand holding Claude to make it believe it's not doing anything too nefarious.
I have valid cyber verification with Claude (they approved it super fast, in ~2 hours after applying)
It still blocks and stops pretty much all the time because of rail guards. Specially since the release of Opus 5. I do believe when Anthropic asks during the verification process "what will you use this for", that they somehow use that info during the chat to decide whether to block or not the request.
So you might be able to do one thing in cyber, but not another one. I seem to be able to research and reverse binaries with Claude, most of the time, and if I phrase my questions in certain ways. However, any kind of code developing that could be tangentially related to malware is blocked, for me.
I am seriously considering switching to GLM or another Chinese vendor, even after being cyber verified on Claude. The routine blocks I face on the tasks that I applied to the program (reverse engineering, exploit dev) are enough to make me think its better to move ship.
I'm aware but for many that might not be an option and its creepy. Say your research gets leaked or hacked. Now you are liable.
Better to opt for an open source model that can do most of the work but obviously its not going to be as good.
> they are going to make it
It is a possibility we are aware of, also given other instances of the fight of totalitarian or perverse or counterdignified drives of all colors against tools.
But the real fundamental risk I see is that of forgetting the principles of ownership, when circumventions become more possible (like in this case). For example, if cars started behaving insanely and unofficial patches will become available, that would soften the need for a principle "my car must behave seriously: my car must not have advertising modules" etc. and "I must not need to patch my car because of the manufacturer's malicious and vile practices".
>if it gets too good, they are going to make it illegal citing natsec issues and so on.
would be amusing to watch it happen while the second coming of the austrian painter is still in power. the media who fearmongered with sci-fi skynet tropes for the past 3 years will have no choice but to condemn the move.