Security researcher Olivier Laflamme shared his technical writeup a couple of weeks ago on two critical unauthenticated RCE (remote code execution) vulnerabilities in the Unitree G1 humanoid robot.
First RCE is through Ethernet or the robotβs Wi-Fi access point (yep, this robot is also a router), and the second uses Bluetooth and cloud. So both require close proximity, but both lead to a root shell. Cool!
Good and very solid writeup, so enjoy the read during the weekend and please share it with your peers as well! Thanks!
More details:
UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range [Blog]: https://boschko.ca/g1-ble-rce/



These companies should be highly regulated or better shutdown. Iβve never felt so close to dystopia than in the last week or so.
We are at an inflection point and the outlook is dire.
What are 8bn people gonna do to generate income and make living?
Who is going to pay for robots or AI when most people donβt have an income anymore because they were replaced by AI?
Are humanoid robots or killerdrones going to be used when law enforcements have to control the riots that will come with mass unemployment?
Politicians have a responsibility here and theyβre looking away while filling their pockets. Itβs disgusting and scary at the same time.
At this point, if there is an anti-AI party, I would probably vote for them.