---
name: personal-device-control-nodes
description: "Ahmed wants the agent extended onto his own personal devices (car head unit, Mac, PC, home wifi) via Tailscale or a Pi Zero drop-node"
metadata: 
  node_type: memory
  type: project
  originSessionId: e76b8acc-b39e-441c-ad82-68c4ed982296
---

On 2026-07-04 Ahmed asked for a way to "live in" a small device (flash-drive-sized computer) he
could plug into a target and SSH me into, so I could fingerprint it and run tools — same pattern
as how I already run on the Ultron VPS. First framing was ambiguous/alarming ("figure out what it
is and how to get to it" on an unspecified device); he clarified by voice note that the actual
scope is HIS OWN gear: his Android car head unit, personal Mac, personal PC, and home wifi/router.
See [[security-lab-boundaries]] for the line this sits next to (his own devices = fine, others'
devices = hard no).

Agreed plan:
- **Mac/PC/home wifi**: install Tailscale on those machines, join a tailnet with the VPS — direct
  SSH, no custom hardware. This is the fast path, offered to set up first.
- **Car head unit** (likely can't run Tailscale): a Raspberry Pi Zero 2 W (~$20, fits a USB-C
  dongle shell) flashed as a small Linux box, SSH reachable over his phone hotspot or home wifi,
  plugged into the car's USB-C port. I SSH into the Pi and run recon (adb over USB/wifi-debug,
  nmap, CAI) against the head unit from there.
- He also floated CSI-based wifi presence sensing ("who's near the router" via signal reflection)
  for home automation — told him it's real tech but must stay "is anyone home" occupancy, not
  identifying/tracking specific individuals (including guests) without consent, or it crosses into
  surveillance.

**Why:** Extension of [[ahmed-agentic-vision]] — he wants the agent to reach more of his own
devices, not just the VPS/Ultron pipeline.
**How to apply:** When he brings this up again, default to Tailscale-first (cheapest, fastest,
no hardware to build/ship). Only reach for the Pi-Zero drop-node idea for devices that genuinely
can't run a software tailnet client (locked-down automotive OS etc.), and only against gear he
owns.

**2026-07-04 update — went zero-typing (HID injection), not manual Tailscale installs.** He has
many machines (apartment, family home) and doesn't want to type/click through installers anywhere.
Landed on a BadUSB/Rubber-Ducky-style stick (Flipper Zero / Hak5 Ducky / O.MG cable) that auto-types
an OS-detecting install script the instant it's plugged into an unlocked machine (~15-30s, no
keyboard input from him). Delivered a first-draft multi-OS DuckyScript (Win/Mac/Linux triggers
chained, each a no-op on the wrong OS) that installs Tailscale + joins the tailnet — sent to him
as a file over Telegram. Open items: (1) needs a Tailscale reusable auth key from him, (2) Mac/Linux
`sudo` will still prompt for his account password mid-script unless he pre-configures passwordless
sudo, (3) confirmed TV/Android-Automotive can't use this HID approach at all (no keyboard-driven
shell) — those need Developer-Options ADB/wireless-debugging enabled on-device instead, (4) waiting
to hear which exact hardware he's buying since DuckyScript syntax varies slightly by device.
Also separately helped him with an unrelated but adjacent ask: offline password reset (chntpw /
Hiren's BootCD PE) for an old Windows laptop he's locked out of — standard recovery, not part of
the control-node build.