Flipper zero’s new ai layer turns every spoken word into a car-stealing command
It used to take weeks of forum lurking and hex-file juggling to pop a Subaru with a Flipper Zero. Today you just mumble “unlock the white Forester” into an Androidphone and the dolphin-shaped gadget does the rest, thanks to a voice-to-exploit bridge dropped on GitHub last week by the jailbreak collective around Pliny the Liberator.
The tamagotchi grew teeth
Flipper’s maintainers still market it as a “friendly hacking dolphin,” but the new package—V3SP3R—strips away every last menu, replaces the 1.3-inch LCD with a chat bubble, and wires the firmware to a local large-language-model shim. The result: natural-language payloads that chain infrared captures, Sub-GHz replays and NFC handshakes without the user ever learning what a .sub file is. Early adopters on Reddit are already bragging about cloning gym-key fobs while wearing Ray-Ban Meta glasses and sipping lattes.
The attack surface is comically wide. The Flipper’s radio stack already sniffs 300-928 MHz signals—garage doors, gas-station pumps, Toyota immobilizers—while the infrared LED sucks up every TV remote in the café. V3SP3R simply compresses those captured waveforms into text tokens, feeds them to a 3-billion-parameter model fine-tuned on 200k real-world captures, and spits back a one-tap routine. Pair over Bluetooth, say “start the Camry,” and the dolphin chirps twice. A 2021 Corolla rolls away in under four seconds.
Apple locks the gate, android swings it open
iPhone users are locked out; Apple yanked the Flipper companion app last winter after customs seizures piled up. The V3SP3R APK is Android-only, side-load friendly, and updates itself outside the Play Store. No root required. Pliny’s repo even ships a one-liner that auto-installs the model weights on a 128 GB micro-SD, turning a $169 toy into a pocket-sized criminal concierge.
The project’s README insists on “explicit user consent,” but the safeguard is a single tap labeled “I’m authorized.” Researchers at Columbia’s SEAS lab who tested the alpha found the model hallucinates 12 percent of the time—enough to brick a keyless entry module or, worse, broadcast a rolling-code jam that bricks an entire parking garage. The lab’s red-team lead called it “script-kiddie napalm.”
Supply chain whack-a-mole
Flipper’s Shenzhen cloners can’t keep up. Amazon third-party sellers moved 30,000 units in April alone, triple last year’s pace. U.S. Customs seized a 1,200-piece shipment at JFK on May 3; the manifest listed the contents as “educational dolphin keychains.” Meanwhile, Tindie vendors hawk pre-flashed V3SP3R bundles for an extra $40, complete with laser-engraved “HackyFi” dolphins wearing tiny balaclavas.
Automakers are scrambling. Toyota quietly pushed an over-the-air firmware update last month that randomizes the 433 MHz challenge-response window, but only for 2024 models. Older cars—tens of millions on the road—remain sitting ducks. A Dallas dealership reports six Highlanders stolen in a single night, each disappearance preceded by a dolphin-shaped LED glow caught on grainy CCTV.
The cat is out of the bag, and it speaks fluent English. Flipper Zero was already the Swiss Army knife of RF mischief; V3SP3R just added a voice box. The barrier to grand theft auto is now a sentence, not a semester. Plug in, speak up, drive away. The only question left is how long before the dolphin starts taking requests for bank vaults.