jchan7/mike

jchan7/mike renames everything to Bobby and adds a plaintext dev-login backdoor

One topic: a fork-bootstrap commit that rebrands and adds a dev-login bypass. Nothing here transfers to another fork cleanly. The identifier renames conflict with upstream alignment, and the auth bypass is a security risk in any deployed build. This fork is likely a personal development environment, not a project intended for outside adoption.

View on GitHub →

jchan7's fork rebrands upstream mike as Bobby across 76 files - package names, TypeScript types, system prompts, the production URL, every identifier. The package manager is switched from bun to npm. A hardcoded credential check in the login page (jason@rogo.ai / jasonchan) bypasses Supabase auth and writes a fake session to localStorage. There are no functional additions to the product beyond the rebrand.

What's in it

Rebranded as Bobby The project has been renamed end-to-end from Mike to Bobby, including the assistant's own self-identification.
Local developer setup Early scaffolding work to get the fork running in jchan7's own environment, including a tooling swap and a developer-only login path.

Direction

brandinginfrastructure

Activity

Themed changes and pull requests touching this fork, newest first. Themed changes that haven't been turned into a public post yet still appear — they're real work even without a published writeup.

📝 jchan7 renames Mike to Bobby - and bakes a login backdoor into the source 2 commits 3mo ago securitybranding draft

A top-to-bottom rebrand is the headline; a hardcoded sign-in that skips the real login system is the story.

Threads of work (detailed view)

2 threads have been distilled into posts.

jchan7 renames Mike to Bobby - and bakes a login backdoor into the source

A top-to-bottom rebrand is the headline; a hardcoded sign-in that skips the real login system is the story.

securitybranding

2 commits · latest 3mo ago

jchan7/mike: full rebrand to Bobby with a hardcoded dev-login bypass

Two commits rename everything from Mike to Bobby across 76 files and switch the package manager from bun to npm. Buried in the first commit is a client-side auth bypass: email `jason@rogo.ai` / password `jasonchan` skips Supabase entirely and stuffs a fake user into `localStorage`.

securitybranding

2 commits · latest 3mo ago