AI Safety
Two Unauthenticated Root Chains on the Unitree G1 Need No Pairing
The UniBLEed disclosure went out at 16:13 UTC on 27 August with two CVEs published four hours later. One chain runs over an unauthenticated WebRTC-to-DDS bridge on TCP 9991; the other goes in over Bluetooth with no pairing at all.
2d ago
