Our conversation dove into the often-murky waters of embedded systems and the Internet of Things (IoT), sparked by a specific vulnerability discussion on Paul’s show concerning reference code for the popular ESP32 microcontroller. Identifying this copied code requires techniques like source code fingerprinting, but even that can fail if developers rename variables or functions. The rise of AI code generation, potentially trained on or using such examples, adds yet another layer of complexity to detection (since the AI will probably also include the code, but you don’t know it’s copied)