The AI reverse-engineering party is ending: Codex bans and Claude refusals push hackers toward local models

"It was a fun few weeks while it lasted," 404 Media wrote on Nov. 10. The trend of using Claude and Codex to strip ads off smart TVs and revive bricked internet-of-things gadgets is now running into AI companies' guardrails, the outlet reported.

Several people say Claude Code tripped "safety checks" mid-task when they tried AI-powered reverse engineering, and a highly upvoted r/ClaudeCode post declared "The Dream is dead. Reverse Engineer Anything (REA) is not likely to work with Claude." X user log4j, who used Codex to reverse engineer Samsung TVs, said OpenAI banned the account for "cyber abuse." Decomp.wtf, a project that made decompiling software and games easier, has also shut down.

REA, an open-source MCP server that lets coding agents pull apart apps down to the binary, has passed 440,000 GitHub stars; this morning's story about Claude Code and Codex reading a 32-year-old Jeep's engine computer came out of the same wave. OpenAI's Tarun Gogineni said last month that "these blocks are mostly accidental and a result of difficult decision boundaries; there is no prohibition against reverse engineering with codex. it's getting fixed." 404 Media's story did not include a response from Anthropic.

Security consultant Matt Brown told 404 Media his reverse-engineering blocks were "more or less 100% correlated" with cyber-category blocks, and that because frontier guardrails "randomly change without warning on the same model," he doesn't want to build on an ecosystem that will lock him out. He recently used the Chinese open-weight model GLM 5.3 to find hidden Bluetooth commands in a propane gas monitor. 404 Media expects this work to migrate to local, open-weight models.