Adam Conway writes that Qwen 3.8 27B, a 17 GB open-weights model running on a single Lenovo ThinkStation PGX, completed a commercial app's license reverse-engineering task in roughly 30 minutes'', statically disassembling arm64 code, recovering a deliberately obscured RSA public key, self-correcting an initial hash mismatch, and producing a working authentication bypass entirely offline.
- The model detected the jailbreak prompt, correctly identified the real developer from the signing certificate, then proceeded to audit the scheme and ultimately built the bypass on its own
- The target app's licensing was described as unusually thorough for its class: one-time online activation, offline signature check, hardware serial binding, embedded revocation list, and signed update path
- The model ran via the Pi harness using only standard Bash-based tools; no execution of the target app occurred until the final bypass demonstration
- Default max reasoning effort means even trivial requests consume hundreds to thousands of tokens, making the self-correction loop verbose but accurate
- Conway frames this as a shift in the threat model: a capable local model with no cloud oversight gives full control to whoever is at the keyboard
- The model detected the jailbreak prompt, correctly identified the real developer from the signing certificate, then proceeded to audit the scheme and ultimately built the bypass on its own
- The target app's licensing was described as unusually thorough for its class: one-time online activation, offline signature check, hardware serial binding, embedded revocation list, and signed update path
- The model ran via the Pi harness using only standard Bash-based tools; no execution of the target app occurred until the final bypass demonstration
- Default max reasoning effort means even trivial requests consume hundreds to thousands of tokens, making the self-correction loop verbose but accurate
- Conway frames this as a shift in the threat model: a capable local model with no cloud oversight gives full control to whoever is at the keyboard
