Claude wrote the Linux drivers. Then a pedal maker decompiled three rivals
Christian Schaller recorded a Windows driver talking to a film scanner through a virtual machine, then had Claude reproduce its USB traffic on Linux. His backend scans at 3600 dpi in 34.6 seconds; upstream SANE's takes 54.4.
Schaller used Claude Code to build drivers for a Plustek film scanner and fix a ThinkPad webcam, using Windows traces as the answer key. In low light, the webcam's frame brightness rose from 31.1 to 90.9.
In the thread, a guitar-pedal maker said they decompiled three rivals' award-winning effects in 72 hours and that their industry's moat had vanished. A hardware engineer replied that the moat was never there: if the firmware is readable, it was always open.
Windows as the answer key
Christian Schaller describes three reverse-engineering jobs done with Claude via Claude Code. The method is the same each time. He runs a Windows VM under KVM with the real device passed through, captures the vendor driver's USB traffic with usbmon on the host, repeats the operation on Linux, and has the model diff the two traces. His scripts are now packaged as a shareable tool called hw-harness.
The first target was the Plustek OpticFilm 8200i film scanner, built on a Genesys GL128 controller. His SANE backend does color, gray, infrared and color+IR scans from 300 to 7200 dpi, with infrared dust removal. At 3600 dpi it needs 34.6 seconds against 54.4 for the genesys backend added to upstream SANE in September 2026, though that is one unit and one frame. He also wrote Negative Vibes, a Rust GNOME app for 16-bit linear scans.
The third job was a MIPI camera on a ThinkPad X1 Carbon Gen 14 (Aura Edition): a Sony IMX471 sensor behind an Intel IPU7. Fixes covered a crop bug, a test-pattern register width, an analogue-gain cap that cost about 1.8 stops, and missing lens shading correction that left corners about 2.7 stops dark. In a controlled low-light test, frame brightness went from 31.1 to 90.9. Blue is still about 17% short of a USB webcam reference. Kernel patches went to Kate Hsuan and libcamera patches are under review.
A pedal maker clones three rivals, and a hardware engineer says the moat was never there
The thread turned from scanners to who gets exposed. A founder of a small pro audio company, whose comment says they make guitar pedals and have been aiming to build a processor to rival the Eventide H90, wrote that they spent three days in "a silent panic attack":
"In the past 72 hours I have ONE-SHOT decompiled 3 of my main competitors products, including the Strymon Big Sky. I just... have their award winning algorithms now." — the founder of a small guitar-pedal company
They say they checked the work by having Claude build an emulator that executes the original firmware, then comparing a C++ port against it. One of the three came partly for free: while it prepared the Lexicon 224, Claude found that someone had dumped the same result on GitHub a week earlier and used that code. Their conclusion: their own products are equally exposed, and "The moat of hardware effects processors has just vanished."
A hardware engineer disagreed with the diagnosis, not the demonstration:
"If your firmware is open for someone to reverse engineer now, it has always been open." — hardware engineer replying to the pedal founder
The real moat, the engineer argued, is secure microcontrollers, encrypted firmware and secure key stores, and "security through obscurity is the moat that has vanished". Another commenter offered the same fix, encrypting the firmware with keys in tamper-resistant hardware, and conceded that it makes development and updates "a PITA". A third reply, from a commenter who suggested competing on the physical product, said the market will reward "better knobs, better usability" and brand, since people like buying from small artisan companies.
Who would write the algorithm in the first place
The founder's panic prompted a darker reading from a commenter with 5k karma: why would anyone "toil to create a new algorithm" if it can be taken in hours? A reply welcomed that. In a post-IP world, they wrote, code is disposable and "it's expertise that matters now". The pedal founder's own numbers cut against that: the whole Ursa Major range took about 20 minutes, which suggests the expertise lived in the firmware.
Why not Nvidia and Apple
A commenter wanted the technique pointed at "useful" closed hardware instead of old scanners: CUDA, Nvidia firmware, Apple's software. "No more excuses." Two replies undercut the premise. One said older hardware is simply easier and better documented. The other went further:
"the real barrier is really the whole first-party support, it's not the technical stuff." — commenter replying to the Nvidia and Apple list
Their argument was that those targets were reversed long ago and did not matter, because a driver for one version of a watch is obsolete with the next watch.
Cheap reverse engineering and the license question
A software engineer with a cyber-defense and purple-team background described the cheap end: an Alcatel modem/router with undocumented hardware, UART pins soldered on, and an agent that built an OpenWRT pipeline in about an hour, for $0.86. In the same comment they added that the vendor's proprietary driver mods were "not really legal" since the GPL source was never published. The license question reached Schaller's own project too. One commenter asked why he built a negative-conversion tool when NegPy already exists with a reverse-engineered OpticFilm 8200i, and a reply guessed: "because now they don't need to respect the LICENSE." That is a quip, not a finding, but it is the question each success in the thread leaves open: whose code did the model's trace-and-diff method end up resembling?
Get breakdowns like this every day
The top Hacker News stories, unpacked — by email, Telegram, or RSS.
Current Affairs bans AI-written text and art, written into its union contract
The magazine's new rule is two sentences long: no AI-generated articles or illustrations. Writers may use AI for research, and artists for small touch-ups.