Rabbit R1 makes catastrophic rookie programming mistake

Ғылым және технология

A group of jailbreakers recently discovered that the Rabbit R1 codebase contains hardcoded API keys - giving them easy access to user data from their AI tech-to-speech service.
#programming #hacking #thecodereport
🔥 New Full Linux Course coming soon!
Upgrade at fireship.io/pro
Use code LINUX30 for 30% off PRO access
💬 Chat with Me on Discord
/ discord
🔗 Resources
Rabbitude Disclosure rabbitu.de/articles/security-...
AI failures • Degenerative AI… The r...
CES 2024 highlights • CES 2024… a glimpse in...
🎨 My Editor Settings
- Atom One Dark
- vscode-icons
- Fira Code Font
🔖 Topics Covered
- Problems with Rabbit R1
- What to when sensitive data is leaked?
- Major mistakes made by programmers
- AI tools that have failed
- Hacking incidents of 2024
- API key safety tips

Пікірлер: 1 000

  • @Fireship
    @Fireship2 күн бұрын

    Degenerative AI… The recent failures of "artificial intelligence" tech: kzread.info/dash/bejne/naad2sN-mK_UnKQ.html

  • @frommarkham424

    @frommarkham424

    2 күн бұрын

    first

  • @Crossfirev

    @Crossfirev

    2 күн бұрын

    second

  • @Scrmbled.

    @Scrmbled.

    2 күн бұрын

    Hello fireship

  • @idehenebenezer802

    @idehenebenezer802

    2 күн бұрын

    Jesus is the way, the truth and the life. Turn to him and repent from your sins today!

  • @videogames8261

    @videogames8261

    2 күн бұрын

    " " "artificial" "intelligence" " "

  • @Requiem100500
    @Requiem1005002 күн бұрын

    It's shocking how Rabbit R1 still manages to disappoint despite everyone having zero expectations

  • @brunesi

    @brunesi

    2 күн бұрын

    True words my dude.

  • @Jaykh2o

    @Jaykh2o

    2 күн бұрын

    Maybe that’s their schtick, it’s relatable to everyone’s relationship with their parents

  • @HansFriedrich532

    @HansFriedrich532

    2 күн бұрын

    They got millions of investments and people bought it so you’re wrong

  • @TheSCBGeneral

    @TheSCBGeneral

    2 күн бұрын

    What do you expect from a NFT founder who only developed the product to get on the AI hype train?

  • @suddeneye9836

    @suddeneye9836

    2 күн бұрын

    🤣 seriously

  • @awesomedavid2012
    @awesomedavid20122 күн бұрын

    its almost as if they tried to rush out a scam as fast as possible to sell to people before they vanished

  • @user-oi5ue6ci3l

    @user-oi5ue6ci3l

    2 күн бұрын

    yeah, almost

  • @N0Xa880iUL

    @N0Xa880iUL

    2 күн бұрын

    Coffeezilla

  • @obsidianjane4413

    @obsidianjane4413

    2 күн бұрын

    Firstish to market!!!!

  • @SioxerNikita

    @SioxerNikita

    2 күн бұрын

    They were aware of one thing. With this, it is hard to just disappear, so more likely they discovered they were severely under-experienced to develop this, so they rushed a product to be "first", or likely running out of money. There is no indication they are just going to disappear

  • @johansugarev

    @johansugarev

    2 күн бұрын

    @@SioxerNikita they're ex-crypto bros, the end go is always to disappear for these types.

  • @JohnneyleeRollins
    @JohnneyleeRollins2 күн бұрын

    everyone is scrambling to not be compared to rabbit-r1

  • @witness1013

    @witness1013

    2 күн бұрын

    Especially r-2!

  • @DontReadMyProfilePicture566

    @DontReadMyProfilePicture566

    2 күн бұрын

    Don't read my name

  • @machieu

    @machieu

    2 күн бұрын

    @@witness1013 Wondering what it will look like

  • @Scrmbled.

    @Scrmbled.

    2 күн бұрын

    Fr

  • @idehenebenezer802

    @idehenebenezer802

    2 күн бұрын

    Jesus is the way, the truth and the life. Turn to him and repent from your sins today!

  • @derektata
    @derektata2 күн бұрын

    They could say the bricked models are in “paperweight mode” and just call it a feature.

  • @stonecoldcarebear

    @stonecoldcarebear

    2 күн бұрын

    You just casually mentioned the first legitimate use for the R1. A constant bright orange reminder of how not to do things.

  • @John_C_J

    @John_C_J

    2 күн бұрын

    Just like every other dead product with a working display, it too shall become a retro gaming emulator.

  • @derektata

    @derektata

    2 күн бұрын

    @@John_C_J It's the circle of life.

  • @Hexstream

    @Hexstream

    2 күн бұрын

    "This critical security update permanently renders your device harmless, which is a huge step up from the dangerous liability it was before."

  • @mtarek2005

    @mtarek2005

    2 күн бұрын

    ​@@stonecoldcarebearIt's bright orange making it way more useful as a reminder compared to a black or white laser projector that's more of a fire starter for when you can't find your lighter

  • @snake3444
    @snake34442 күн бұрын

    Wow this thing is really the "I threw node modules together that I didn't really understand" of AI

  • @NatiiixLP

    @NatiiixLP

    2 күн бұрын

    The vast majority of "AI-powered" projects are, lmao

  • @ZackMathissa

    @ZackMathissa

    2 күн бұрын

    @@NatiiixLP Most "innovative startups", if not all

  • @wasd____

    @wasd____

    2 күн бұрын

    That's what almost all "AI" projects are tbh

  • @julianojosoa2145

    @julianojosoa2145

    2 күн бұрын

    Well it's UI is written in Flutter so you're a bit wrong

  • @NatiiixLP

    @NatiiixLP

    2 күн бұрын

    @@julianojosoa2145 He said it's the equivalent of throwing random node modules together, not that it's literally using node modules.

  • @mahmutpekkara
    @mahmutpekkara2 күн бұрын

    1:19 "Hi mom, I miss you." 🥺😔

  • @rahul_ji21

    @rahul_ji21

    2 күн бұрын

    🥺

  • @theairaccumulator7144

    @theairaccumulator7144

    2 күн бұрын

    What happened to his mom?

  • @piusijachi2763

    @piusijachi2763

    2 күн бұрын

    ​@@theairaccumulator7144 she passed away

  • @juanrolon1729

    @juanrolon1729

    2 күн бұрын

    this is only comparable to Technoblade. The pain is real.

  • @oivinf

    @oivinf

    2 күн бұрын

    for a short moment i thought it was an accident until I read the rest of it

  • @tHebUm18
    @tHebUm182 күн бұрын

    Tough times for a device that's obviously just a smartphone but worse.

  • @laptopuser5198

    @laptopuser5198

    2 күн бұрын

    Basically a mp3 player

  • @wacesferpit

    @wacesferpit

    2 күн бұрын

    @@laptopuser5198 at least an mp3 player doesn't become a brick when some server it relies on for everything eventually shut down

  • @sandman.38

    @sandman.38

    2 күн бұрын

    MP3 player with always-on DRM type shit

  • @635574

    @635574

    2 күн бұрын

    With a catastrophic battery

  • @wlockuz4467

    @wlockuz4467

    2 күн бұрын

    Comparing it to a smartphone is giving it too much credit lol

  • @Randomly_Facts
    @Randomly_Facts2 күн бұрын

    Rabbit hole❌️ Loophole✅️ Edit: My new record for likes on a comment

  • @lillywho

    @lillywho

    2 күн бұрын

    Shitehole ✅

  • @1.4142

    @1.4142

    2 күн бұрын

    Kola superdeep borehole ✅

  • @DontReadMyProfilePicture566

    @DontReadMyProfilePicture566

    2 күн бұрын

    Don't read my name

  • @Randomly_Facts

    @Randomly_Facts

    2 күн бұрын

    @@1.4142 ✅️

  • @trevics_

    @trevics_

    2 күн бұрын

    rabbithole loophole

  • @dillbourne
    @dillbourne2 күн бұрын

    "half baked" is a very generous description of the Rabbit. That batter was still wet

  • @theactualslimshady
    @theactualslimshady2 күн бұрын

    “I was blown away by its utter uselessness along with the amount of cringe buzzwords used by its CEO” describes literally every “AI Startup” founded after OpenAI released GPT to the public

  • @NineSun001

    @NineSun001

    Күн бұрын

    This applies to 99.99958% of all tech start-ups. It does not matter if its fintech, or some artists that released a sick 3d render of some revolutionary new transport,energy,etc.-system that will totally change the world. You know, like fontus, solar roadways, hpyerloop and derivates, etc. And idiots who believe that a 3d render is the same thing as a working prototype are investing in these scams. Sadly even governments are burning public money on these scams.

  • @mwwhited

    @mwwhited

    Күн бұрын

    Including OpenAI

  • @thripnixe

    @thripnixe

    Сағат бұрын

    ​@@mwwhited Nope

  • @driedpotatoes
    @driedpotatoes2 күн бұрын

    Outrageous but not surprising

  • @alibarznji2000

    @alibarznji2000

    2 күн бұрын

    How is it not surprising? I for one am very surprised that such bad devs could ever land any jobs, let alone a product that has been a talking point globally for months

  • @DontReadMyProfilePicture566

    @DontReadMyProfilePicture566

    2 күн бұрын

    Don't read my name

  • @driedpotatoes

    @driedpotatoes

    2 күн бұрын

    @@alibarznji2000because you can tell the device was an idea by inexperienced developers. every facet of their implementation has proven to either be naive or extremely basic. These are the same people that make an API call to tell the time during their LLM job when it has a clock on-device instead of just passing it in from device. These people didn’t know what they were doing and were in over their heads.

  • @alibarznji2000

    @alibarznji2000

    Күн бұрын

    @@driedpotatoes fair enough, but my point still stands. How could these people get the funding for a project? The world is a weird place

  • @noahm
    @noahm2 күн бұрын

    Thanks, I will keep this in mind when I’m asking for millions of dollars for my new tech-AI startup company

  • @Nadia-Mooney
    @Nadia-MooneyКүн бұрын

    Imagine a whole team of engineers ignoring a hard coded api key like this... I think we're all going to make it (to a high paying SE job) bros...

  • @timalk2097

    @timalk2097

    Күн бұрын

    Yeah no

  • @EchoMountain47

    @EchoMountain47

    Күн бұрын

    Engineers? More like boot camp dropouts

  • @sandman.38
    @sandman.382 күн бұрын

    I find it funny how a lot of the products we think are super complex, professional, ‘industry-standard’, ‘at-scale’, and well engineered are often poorly made grifts obfuscated by the mystique of private software. And when you try to call it a grift every ego within a one mile radius goes thermonuclear. Everybody thinks they’re Alan Turing once they learn how to use an SDK and build an API to make a CRUD app with infinite skins :) And I’m directly referencing that ugly man child behind the scam companies.

  • @egoworks5611

    @egoworks5611

    2 күн бұрын

    Correct 👍👍👍👍

  • @evocorporation6537

    @evocorporation6537

    2 күн бұрын

    INTERNET OF THINGS (read: devices with SIM cards or wifi connections sending TCP/UDP data to receivers which is just an open Socket) THE CLOOOOUDDDDD (read: somebody else's computer except we're hiring a bunch of services that all do 1 thing rather than a monolithic server where all services compete against each other for CPU/RAM) ARTIFICIAL INTELLIGENCE (read: probability machines that just do guesswork based on input and a dataset (model) to work out of as baseline) BLOCKCHAIN (read: things you don't need)

  • @sapphicgaze

    @sapphicgaze

    2 күн бұрын

    to be fair, i don’t think anyone would consider rabbit to be “complex” or “professional”, they’ve shown themselves to be quite literally the opposite from day 1, the CEO is literally beefing with a 13 year old online, so that’s very telling lol

  • @Num181

    @Num181

    2 күн бұрын

    👌

  • @tristan5299

    @tristan5299

    2 күн бұрын

    ​@@sapphicgaze wait what?? wtf

  • @xpkareem
    @xpkareem2 күн бұрын

    So the R1 was essentially some kid's middle school science project that somehow became a product.

  • @nicejungle

    @nicejungle

    2 күн бұрын

    This

  • @obsidianjane4413

    @obsidianjane4413

    2 күн бұрын

    No it was very much intended as a "product", it was just coaded by middle schoolers apparently.

  • @TypicalBlox

    @TypicalBlox

    2 күн бұрын

    well it was designed by *Teenage* *Engineering*

  • @GangnamStyle33

    @GangnamStyle33

    2 күн бұрын

    Could be a ploy floated to steal data. Something trendy? All the rich kiddies have it and then...

  • @0xbitches

    @0xbitches

    2 күн бұрын

    You ain't that far off, their CTO just dropped out of college to found the company

  • @OUmSKILLS
    @OUmSKILLS2 күн бұрын

    I made the mistake of pushing an API key for a web page I was working on in college. Never... again... I'm still getting emails from Git Guardian.

  • @wasd____

    @wasd____

    2 күн бұрын

    Classic blunder

  • @johanespao7788

    @johanespao7788

    2 күн бұрын

    bfg jar it

  • @KingThrillgore

    @KingThrillgore

    2 күн бұрын

    Everybody gets one.

  • @user-wg5bb4lr6z
    @user-wg5bb4lr6z2 күн бұрын

    "Chuck it in the Kola superdeep borehole" - shows a photo of the kimberlite mine "Mir" in Sakha Republic...

  • @pupfriend

    @pupfriend

    2 күн бұрын

    A mistake worse than hard coding API keys

  • @alexnoman1498

    @alexnoman1498

    2 күн бұрын

    a hole's a hole, right? 😂

  • @molenz1960

    @molenz1960

    2 күн бұрын

    @@alexnoman1498 Tell that to your missus

  • @mfaizsyahmi

    @mfaizsyahmi

    2 күн бұрын

    The super deep borehole was capped decades ago, and a picture of a nondescript well cap in a nondescript warehouse doesn't have as much visual impact in a video as an big open pit, does it?

  • @nliznick

    @nliznick

    2 күн бұрын

    This guy's a hole expert

  • @TheMassgames
    @TheMassgames2 күн бұрын

    "I was blow away by it's uselessness" is such a good way to describe the rabbit

  • @dealloc
    @dealloc2 күн бұрын

    No, actually, I could totally believe the Rabbit team put API keys in the app on device as an additional cost saving measure.

  • @SahilP2648

    @SahilP2648

    2 күн бұрын

    I might be missing something here but from what I know you can't get an Android app's code with just the .apk. I don't know how you could get the API key if the app was built with it in the codebase. Also while it's absolutely not a good idea to have any API key in a codebase, again from what I know, leaking any codebase is as bad as leaking the API key (and let me go off road here a bit, github is pretty secure so the only way to access the code base would be either a compromised account or some fed up ex-employee). But it's tomato tomato at that point (as in leaking codebase vs codebase plus API key). And I am not sure about this AWS secrets manager thing but ultimately it will be linked to a single account and if that account is compromised, so is the API key. Although one thing does change by not hardcoding the API key. For rotation you would need to fetch a new API key from the backend server. That's a real reason why not to hardcode it because otherwise you will need to rely on user side app updates to fetch a new version of the app for the new API key.

  • @dealloc

    @dealloc

    Күн бұрын

    @@SahilP2648 APKs are just a ZIP files that contains an app's resources in a tree. This includes the app's native code. In almost all cases API keys are stored as strings in the binary. In case it is not obfuscated, you can easily extract them via. the `strings` program. But regardless of obfuscation, these things can still be reverse engineered, either through manual process, or using a debugger and a bit of time. It's impossible to protect anything you deliver to users. This is why you should not store API keys in client-code. Rotating keys would require users to update, and you're leaking this information to anybody who's curious enough. The point of AWS Secrets Manager is that it's protected through isolation and permission. Keys are stored separately from the application code, and should only be extracted from services that have specific roles to access, which should only be persisted for a short amount of time. Of course any compromise could make it possible to obtain those secrets through those services. In those cases, the isolation makes it easier to prevent further attack by deny access to those compromised services, simply by removing their roles and re-rolling the API keys-but it does not prevent the attack from already compromising data if that data is stored together with the service without any protection. There's always tradeoffs between security and convenience.

  • @Alfred-Neuman

    @Alfred-Neuman

    21 сағат бұрын

    Bro what are you guys talking about? The video is so confusing! I just want to know if I should buy this gadget or not...

  • @0269_m

    @0269_m

    20 сағат бұрын

    ​@@Alfred-Neuman no u don't need it

  • @jessicaJ.Marquard-k1c
    @jessicaJ.Marquard-k1cКүн бұрын

    I find it funny how a lot of the products we think are super complex, professional, ‘industry-standard’, ‘at-scale’, and well engineered are often poorly made grifts obfuscated by the mystique of private software. And when you try to call it a grift every ego within a one mile radius goes thermonuclear.

  • @crackwitz

    @crackwitz

    Күн бұрын

    That's copied from another comment. It's a spam bot.

  • @coel312
    @coel3122 күн бұрын

    Wow, this is very catastrophic!

  • @yumekarisu9168
    @yumekarisu91682 күн бұрын

    Considering they hardcoded Spotify to play any Beatles song, I'm not surprised if they hardcoded api key

  • @miserablepile
    @miserablepile2 күн бұрын

    API keys, Netflix passwords, and blunts were made to be shared

  • @thepupil2
    @thepupil22 күн бұрын

    Companies rushing to replace the smartphone with linear algebra gameboys should probably take a lap, skip this round, and come back after the hype-train leaves the station.

  • @alexturnbackthearmy1907

    @alexturnbackthearmy1907

    Күн бұрын

    Rabbit is temporary, but dumbifying devices for no good reason is eternal.

  • @toxicitysocks
    @toxicitysocks2 күн бұрын

    Ok but then after it was published they rotated the secrets and remediated the issue but then they were like “yo there’s a secret 5th key we didn’t tell you about just to see if you would fix it too” and they totally missed that one.

  • @lukesjukes1
    @lukesjukes12 күн бұрын

    This is like old school weekend update. “Rabbit one exploit found that allows someone to read and edit any message!” “This has affected… 8 users around the nation”

  • @gm3052CA
    @gm3052CA2 күн бұрын

    I love the Assange reference

  • @abdiastenas6890
    @abdiastenas68902 күн бұрын

    Did I just swallow an ad for a Linux course? ... ... ... I'll take it, no discount needed.

  • @captain_clark868
    @captain_clark8682 күн бұрын

    Shoutout for mentioning Julian assange

  • @drj-pp8hw

    @drj-pp8hw

    2 күн бұрын

    Ya let's all simp for the guy who outted anti Taliban and anti CCP activists and withheld leaks on Putin and the GOP 🤡

  • @rashidxd
    @rashidxd2 күн бұрын

    IIRC, with AWS Secret Manager, if they have access to the server, they could still see the secret since the IAM permissions (role) is attached to EC2 instance. So they could simply use aws cli or api from the server to get the token.

  • @lightlysal

    @lightlysal

    2 күн бұрын

    what is the standard industry way to consolidate/secure all your API keys then? I'd like to know.

  • @mattmurphy7030

    @mattmurphy7030

    2 күн бұрын

    @@lightlysalcommenting for follow up notifications

  • @eskay_mochi

    @eskay_mochi

    2 күн бұрын

    That secret manager is sufficient. The outlined scenario here assumes that the server is compromised, which is something you'd want to prevent in the first place since it's over once they can execute commands on your server. There's a lot of things that can be leveraged, like using a VPC and working only within that network or just running your app on a rootless Docker container. When using an API key from the secret manager, make sure to never log it. Is it 100% safe? Of course not, they're always gonna find a way. But you can make it really, really difficult, and at the very least, not blatantly available.

  • @bepamungkas

    @bepamungkas

    2 күн бұрын

    @@lightlysal When you manage your own instance, usually the relevant packages came with sane defaults (e.g http and db servers usually run under their respective user and groups). You can either NOT consolidate secrets but only provide them on need-to-know basis for each users (which is the traditional way), or use secret manager like vault and pass-along auth (either from app level or OS level) as the identity.

  • @Daniel15au

    @Daniel15au

    2 күн бұрын

    It reduces the risk though. I'm not familiar with AWS, but in general, once your secrets are automatically managed (meaning they're automatically rotated), you can make the validity duration far shorter, use separate keys for readonly access vs read-write, lock down how the key can be used, etc. A leaked key shouldn't be valid long. You could also do something like have a separate super secure server that proxies requests and injects the API key. Your app servers would make requests without the API key, then the proxy server would add the key. Grant very few people access to the proxy server.

  • @Ahmed.Shaikh
    @Ahmed.Shaikh2 күн бұрын

    Wow, I can't believe anyone would do that! *starts looking into API key rotation for my google maps app*

  • @alexnoman1498

    @alexnoman1498

    2 күн бұрын

    learning taking place 🎉

  • @protocolsev

    @protocolsev

    2 күн бұрын

    Yeah but you're not selling thousands of hardware products with an accompanying backend service

  • @Garycarlyle
    @Garycarlyle2 күн бұрын

    Damn. This really inside a rookie error. Like high school level.

  • @N7Tonik
    @N7Tonik2 күн бұрын

    nothing wrong with client side API KEYS, in fact they are required for example in firebase clients, it only becomes an issue when the key gives you access to things you shouldnt have access to

  • @fotidim

    @fotidim

    2 күн бұрын

    This 👆

  • @MrBeltalowda

    @MrBeltalowda

    Күн бұрын

    but that is exactly the point, they hardcoded the company's api keys

  • @chiluco2000

    @chiluco2000

    Күн бұрын

    Those API KEYS should give you access to an intermediate server, but somewhere down the line there should be a way to display a numerical keypad so you can type/configure a PIN code

  • @muhammadz2224
    @muhammadz22242 күн бұрын

    Making a wrapper for an Android app should never be successful, no matter the hype.

  • @tylerknight99

    @tylerknight99

    2 күн бұрын

    The touch screen self-order menus at Taco Bell are an android app and I think their success is warranted

  • @polimpiado
    @polimpiado2 күн бұрын

    Rabid AI

  • @drickzee
    @drickzeeКүн бұрын

    Looking forward to the new Linux course!!

  • @val78787
    @val787872 күн бұрын

    Love your videos, thanks for another great one!

  • @n00dles4
    @n00dles42 күн бұрын

    AI is particularly appealing to people who don't understand programming (suits, ceos, upper management, etc) Taking shortcuts usually just leads to garbage that has to be rewritten by someone who knows what they are doing. People who are bad at programming will use AI instead of learning and pump out more garbage that I know I'll have to clean up It's like trying to replace aircraft pilots with androids, except people don't generally think of software engineers that way because it isn't as easy to understand as "man fly plane"

  • @thomasschlitzer7541

    @thomasschlitzer7541

    2 күн бұрын

    I am that, run my own AIs on my local ADA server and know quite well how to program. What you don't understand is the way products get financed. You really think investors look into the codebase? The idea of stand alone AI devices is not bad if well done. The business case could work and when presented it will be shown in the best possible way. You can't know how bad it will be in the end. Rabbit and AI pin could work if they wouldn't rely solely on external APIs. That's what makes them so bad. It's the same with all those stupid OpenAI "apps" flying around on IG nowadays. It's like a virus, AI with a lazy implementation just produces garbage. But even that doesn't matter as long as the money flows. It's not about good code, AI or quality. It's about money.

  • @SowTag
    @SowTag2 күн бұрын

    Saddest API key in existence. My deepest condolences, dude.

  • @damianzielinski71
    @damianzielinski712 күн бұрын

    This video was full of great value ❤

  • @supaschwamal
    @supaschwamalКүн бұрын

    Subscribed after this video. I enjoy your deadpan humour combined with really useful information.

  • @xeboox
    @xeboox2 күн бұрын

    The ending was on point 4:14

  • @chaptersword472
    @chaptersword4722 күн бұрын

    4:10 sir meowsalot

  • @federicobersano
    @federicobersano2 күн бұрын

    So glad and relieved to hear that there is already a recommended solution at 4:14 😁

  • @bruno3
    @bruno3Күн бұрын

    The engineers could've added extra layers of security, like encrypting the key and storing it in a safer way, but if someone is reverse-engineering the device, even that becomes a risk at some point. The only way would be to use their own servers as an access point and store the keys there. But that would add latency and... it would be more expensive. And that's the thing: they always knew this wouldn't last; the only goal was to make the most profit in the least amount of time. And then just disappear.

  • @blinking_dodo
    @blinking_dodo2 күн бұрын

    At this point i am wondering if *even i* could make a better Rabbit device...

  • @KingThrillgore

    @KingThrillgore

    2 күн бұрын

    You have one already you're using it

  • @FRanger92

    @FRanger92

    2 күн бұрын

    No device at all is a better Rabbit

  • @yashaswinis45

    @yashaswinis45

    Сағат бұрын

    this, ikr?

  • @Mia__Single__again704
    @Mia__Single__again7042 күн бұрын

    Babe wake up fireship posted a video.

  • @John_C_J

    @John_C_J

    2 күн бұрын

    Thank you spam bot.

  • @tawfeeq-exe

    @tawfeeq-exe

    2 күн бұрын

    @@John_C_J Dude your reply deserves more attention than the comment fr.

  • @AkosLukacs42
    @AkosLukacs42Күн бұрын

    Solid advice at the end!

  • @georgios_georgiou
    @georgios_georgiou2 күн бұрын

    Love the fact that Jeff knew about this code report would be a total diss so he had to outro with both R1 n Code Report fire in the hole style 💥💥💥

  • @inzaghiposumaalkahfi9650
    @inzaghiposumaalkahfi96502 күн бұрын

    0:34 Or, it's on Dhu al-Hijjah 20th, 1445 AH and you're watching Code Report Series on Fireship about Rabbit R1 makes Catastrophic Rookie Programming Mistake.

  • @IzzumiPoshaf

    @IzzumiPoshaf

    2 күн бұрын

    Yes, you're Correct 👍👍

  • @auroraborealis5565
    @auroraborealis55652 күн бұрын

    3:52 uhhhh.....is that David Goggins???

  • @hyperadapted

    @hyperadapted

    2 күн бұрын

    stay hard

  • @BobbyBrixx

    @BobbyBrixx

    2 күн бұрын

    stay hard

  • @anon_y_mousse
    @anon_y_mousseКүн бұрын

    You called it a rookie mistake and you delivered. I do wish more devices had an integral physical scroll wheel, though.

  • @Spectrumix
    @SpectrumixКүн бұрын

    Finally a video somewhat about AI that doesn't have deformed or grotesque imageries . thank you sir.

  • @davidioanhedges
    @davidioanhedges2 күн бұрын

    The Rabbit R1 is a set of API calls strung together, with some not very good hardware ... ..and you can do absolutely everything it can do on a cheaper Smartphone, for no additional fees ...

  • @theairaccumulator7144

    @theairaccumulator7144

    2 күн бұрын

    Why does the hardware need to be good anyway? It's job is literally to record audio and send it to a aerver then receive a response and play it back. Don't even need android for that. A microcontroller could do it but it too but it would be way harder to maintain.

  • @tylim88

    @tylim88

    2 күн бұрын

    ​​@@theairaccumulator7144then why you need it when way better hardware is available

  • @thepuppetqueen57
    @thepuppetqueen572 күн бұрын

    Babe wake up fireship posted a video

  • @DsiakMondala

    @DsiakMondala

    2 күн бұрын

    ywnbaw

  • @Likemea

    @Likemea

    2 күн бұрын

    ...

  • @Likemea

    @Likemea

    2 күн бұрын

    ERROOOOOOOOOR

  • @gnysi00wskyy32

    @gnysi00wskyy32

    21 сағат бұрын

    ​@@DsiakMondalacry

  • @Largecow_Moobeast
    @Largecow_Moobeast2 күн бұрын

    It just keeps getting better and better with this thing.

  • @mastercharacter
    @mastercharacter2 күн бұрын

    I remember learning about this with API keys on my IoT course.

  • @justanotherhumanlikeyou
    @justanotherhumanlikeyou2 күн бұрын

    How he thought those shoes were a good idea during his presentations should have been a warning to all...

  • @ytpmeeb
    @ytpmeeb2 күн бұрын

    Can someone explain how this product get the funding?

  • @asandax6

    @asandax6

    2 күн бұрын

    Same way Theranos got it's funding: "Investors betting their money and other people's money on the project".

  • @ytpmeeb

    @ytpmeeb

    2 күн бұрын

    Thanks, it makes sense now… Same old story every day 😮‍💨

  • @nicejungle

    @nicejungle

    2 күн бұрын

    AI hype and the fact that investors are easy to scam (and that's a good thing)

  • @John_C_J

    @John_C_J

    2 күн бұрын

    If you need it in the form of a video essay, go to Coffezilla's first video on it.

  • @catgirlQueer

    @catgirlQueer

    2 күн бұрын

    the AI hype bubble

  • @i3looi2
    @i3looi2Күн бұрын

    oh boy! Can't wait for the R2

  • @FaultyTwo
    @FaultyTwoКүн бұрын

    "Wait. It's all just Android glued to an API wrapper?" *"Always has been."*

  • @ibendover4817
    @ibendover48172 күн бұрын

    What are the odds that this is because the developers blindly used ai extensively when writing code? People predicted this would happen, devs getting lazy not reading code that ai produces, blindly copy-pasting as long as it 'works'. Eitherway, this is probably a lucrative time to be a hacker.

  • @donfeto7636
    @donfeto76362 күн бұрын

    We have our own advanced AI. (API calls to chatgpt)

  • @aaaaaa-hh8cq

    @aaaaaa-hh8cq

    2 күн бұрын

    lmao the same as "apple intelligence" honestly. basically disguised chatgpt, sadly Americans are 2 dum*b to notice it.

  • @hyperadapted

    @hyperadapted

    2 күн бұрын

    crazy to see how something is hyped when designed by reputable company (teenage engineering) while just being a slightly more complex wrapper. Meh

  • @AshishDha
    @AshishDha2 күн бұрын

    super funny! :) thanks !

  • @ArtursDerkintis
    @ArtursDerkintisКүн бұрын

    the references on this channel are unmatched

  • @asdfghyter
    @asdfghyter2 күн бұрын

    4:13 another option is to flash it with a proper android distribution, so you can actually have a crappy android device instead of a crappy android device hard-coded to only run a single app

  • @ToxicMothBoi
    @ToxicMothBoi2 күн бұрын

    I like how even before they prototyped it, i said it was gonna be a shitty small android thing with crappy software that wasnt made by real software engineers. Just looking at the company shouldve told everything enough. Also dont understand how some people have said how 100gb is an insane amount of storage for this thing. What they didnt concider is that nowadays almost every phone launches with 256gb....barely any modern phone is made with anything less

  • @alexturnbackthearmy1907

    @alexturnbackthearmy1907

    Күн бұрын

    100GB is a lot for essencally single app device that doesnt even need a lot of storage. Not to mention that only med-high end phones have that much, low end is still 128gb.

  • @The...0_0...
    @The...0_0...2 күн бұрын

    Just got mine in the post this morning 🎉😂

  • @abandoninplace2751
    @abandoninplace27512 күн бұрын

    Now that's a mitigation that i can get on board with.

  • @FireinHair
    @FireinHair2 күн бұрын

    Not first

  • @renepromesse7410
    @renepromesse74102 күн бұрын

    The last recommendation tho 😂

  • @river.
    @river.Күн бұрын

    Ngl I did that in my college pre internship project. And I was aware enough to point out that this is a security concern and I am in process of fixing it.

  • @regenwurm5584
    @regenwurm55842 күн бұрын

    Another YandereDev

  • @uasaad
    @uasaad2 күн бұрын

    MKBHD destroyed them

  • @tablomaxos2965

    @tablomaxos2965

    2 күн бұрын

    They destroyed themselves.

  • @jusu8961

    @jusu8961

    2 күн бұрын

    Are you perhaps stupid? They caused this themselves and would be absolutely clowned on even if some youtuber didnt make a video about them

  • @ADM.II.

    @ADM.II.

    2 күн бұрын

    💯​@@tablomaxos2965

  • @AXUMV

    @AXUMV

    2 күн бұрын

    Before MKBHD video they was destroyed

  • @dadehax0r

    @dadehax0r

    2 күн бұрын

    Shitty product destroyed them stop being a simp for apple shills

  • @hyperadapted
    @hyperadapted2 күн бұрын

    1:55 was a nice one

  • @davt2718
    @davt27182 күн бұрын

    "Rabbithole" is very smart, bravo FS

  • @888Greys
    @888Greys2 күн бұрын

    Will do a pushup for every like in this comment

  • @uniquehandle1234

    @uniquehandle1234

    2 күн бұрын

    No you wont.

  • @steverock2175

    @steverock2175

    2 күн бұрын

    He will tho

  • @eggft.spicysmallguacamole2270

    @eggft.spicysmallguacamole2270

    2 күн бұрын

    Gave you a dislike to help you out

  • @Kevin-cy2dr
    @Kevin-cy2drКүн бұрын

    Came for the videos ,stayed for the quality content,subscribed for Mom❤ Sorry for your loss Jeff, your Mom is so proud of you.

  • @westganton
    @westganton2 күн бұрын

    Can’t wait for R2

  • @PSCHC_YT
    @PSCHC_YT2 күн бұрын

    Those card frames look kinda like Duel Masters :D

  • @Sierra-Whisky
    @Sierra-Whisky22 сағат бұрын

    At first I was sceptical but when the R1 finally got shipped, I ordered one despite still being sceptical. Just to play around with it. While waiting for my order to be shipped, I read more and more articles and scepticism made place for dissapointment. But to my total surprise, I read that customers can cancel their order until right before the poor thing is being shipped. So I did and to my surprise I got my money back in 24 hours. That's probably the best service Rabbit is offering today 🎉

  • @staffanestberg
    @staffanestbergКүн бұрын

    Best news channel on KZread

  • @nerdxa
    @nerdxa2 күн бұрын

    Fireship is my favorite YT channel😤😤😤

  • @AtomicShrimp
    @AtomicShrimpСағат бұрын

    The vulnerability allows an attacker to read messages sent by users. Fortunately, the device simply fails or refuses to send most messages

  • @Adam.3313
    @Adam.3313Күн бұрын

    Your videos are so awesome

  • @andrew_golubev
    @andrew_golubev2 күн бұрын

    Our expectations were low, but holy sh/t)

  • @-Kuro.
    @-Kuro.10 сағат бұрын

    That's Mir mine, an open pit diamond mine. But I understand it looks a lot more imposing than the actual Kola Superdeep Borehole, just don't want people mistaking the two.

  • @russelmiranda4203
    @russelmiranda42032 күн бұрын

    we love u fireship

  • @yajirushik2871
    @yajirushik28712 күн бұрын

    meanwhile me, trying to be a junior, storing my api keys in .env or secrets or other good solutions...

  • @daniel4647

    @daniel4647

    Күн бұрын

    Standard procedure, I'm not even a programmer and I even I do that when I hack together some junk from code I stole around the web and stitched together with AI.

  • @easternplatypus
    @easternplatypusКүн бұрын

    just when we thought it couldn't get any worse

  • @BernardoLeon
    @BernardoLeon2 күн бұрын

    0:31 hahaha H1MOM at the begging of the API_KEY

  • @twisterrjl
    @twisterrjlКүн бұрын

    sure bro. I'll buy your course too. ssssure bro

  • @3rdman99
    @3rdman992 күн бұрын

    I didn't know they were still around

  • @thisberandom
    @thisberandom2 күн бұрын

    I just need a lull in these Rabbit videos to be able to sell mine

  • @Alfenium

    @Alfenium

    2 күн бұрын

    sell the bnnuy

  • @breakoutgaffe4027
    @breakoutgaffe40272 күн бұрын

    That was wild

  • @karimcartelos5658
    @karimcartelos565822 сағат бұрын

    i was more amazed by the julian assange news !

  • @shauryasai7004
    @shauryasai7004Күн бұрын

    That "No excuses" and David Goggins really threw me off

  • @Kanako13
    @Kanako137 сағат бұрын

    Oh no! I hope those 5 owners will be alright 😢

  • @cerulity32k
    @cerulity32k8 сағат бұрын

    the bubble's popping