logoalt Hacker News

dr_pardeetoday at 2:24 PM6 repliesview on HN

Author here. Quick context: the tablet is a 2021 Fire HD 10 that ran my Home Assistant dashboard and kept powering itself off: the logs showed Amazon's own software issuing the shutdowns, and the only permanent fix was root, which has never existed publicly for this model. Anthropic's and OpenAI's cyber safeguards wouldn't touch the project. Moonshot's Kimi K3 found an unpatched 2022 Mali CVE (CVE-2022-38181: fixed upstream in 2022, patched by Amazon in 2024, but my firmware never got it), GLM-5.2 caught two fatal bugs in the exploit, and GLM-5.3 finished it in a day. The full technical write-up with every offset and dead end is HANDOFF.md in the repo. Happy to answer questions: especially about the model-steering side, which was most of my actual contribution.


Replies

segmondytoday at 4:14 PM

Thanks for sharing, pretty cool. Whenever I read these, I want to see your prompts. Not necessarily the output from the model since that would be verbose, perhaps summarized if too much. But seeing your prompt and how you steer the model would be pretty cool if you don't mind sharing. Thanks again.

terruttoday at 4:49 PM

This is very inspiring. I have the old Kindle Keyboard that was recently discontinued. There are trivial workarounds and existing alternative OSes to get new books on it already, but it might be fun to ask Deepseek if it can help me make something bespoke.

segmondytoday at 6:40 PM

I wonder if you started with GLM5.3, how fast and cheap would it have been? Or did it really need the combo of K3 and GLM5.3

voicedYodatoday at 4:20 PM

Thank you for sharing this story.

By chance, would you mind sharing your prompts?

fwiptoday at 7:37 PM

If your Kindle was plugged in the whole time (as you might with a HA dash), my guess would be the shutdowns are battery related, to avoid degradation or possible fire. Consider removing the battery if you haven't already.

zuzululutoday at 4:02 PM

Is there another provider that can host GLM without declining you card because you tried to root our own device? I think the comparisons are obvious, its impossible to do this fully with anthropic or openai. It's very exciting what open source models make possible but also see if it gets too good, they are going to make it illegal citing natsec issues and so on.

show 3 replies