AI blast radius: BOLA + MCP turned APIs into a 7,000-bot army

A developer wanted to control his robot vacuum with a PS5 controller. With Claude Code’s help, he reverse-engineered the protocol, pulled an auth token, and unintentio...