Claude on a Nokia 3310: a J2ME client, HMAC instead of TLS, and 41 bundled games
VibeNokia is a Java ME terminal for a 2017 Nokia 3310 plus a small FastAPI server that runs claude -p. Notes on CLDC limits, hand-written HMAC signing over plain HTTP, and what that does and does not protect.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.