~/log/computers/dq10-tv-stick-linux
DQ10 stick, malware out
No-name DQ10 Android TV stick (Allwinner H618)
open repo ↗ github.com
- ai
- claude code
- evidence
- public
- reviewed
Sold as Android 13, the stick ran an older Android with open root access, a remote-command system and a hidden reverse-tunnel binary. itsmeorestis had Claude Code back it up, wipe it and install mainline U-Boot and Armbian over USB, with no soldering. The repo lists the malware’s fingerprints.
- ai
- Claude Code ran the job: an Opus session drove the hardware, a Sonnet subagent built the code, and separate Opus subagents audited each step. Nothing was flashed until an audit passed. The README says so.
- caveats
- Proven on one unit. Bluetooth, audio, IR, microSD and video decoding are not verified. Memory settings are hard-coded for this board; other H616 boxes aren't supported. One failure state has no software recovery.
- evidence
- Public code + Reddit post.
- github
- 6 stars, last commit 2026-10-30. As of 2026-11-06. Stars show interest, not safety.
Code or detailed materials are published. Says nothing about safety, quality or maintenance. Not tested by unshittify. Added by unshittify. Wrong or out of date? Send a correction.