ai-cro ·

The password check was the easiest way to crash my server

Driving Claude Code on my Mac from an iPhone. No API to write into, a screen that's illegible once shrunk — and three security features that didn't exist.

The phone-remote app on an iPhone — a window picker at the top reading gemlabs, then a Claude Code conversation feed with a grey 'thought' line, a bold Bash tool call with its command in a collapsed IN block, a spinning star reading Puttering, and at the bottom an input field with a microphone inside it
Claude Code's narration, redrawn on a phone from the same data the desktop reads. The star spins while a tool is still running. — Demo by GemLabs
For subscribers — sign up to read the whole thing

🧪 A GemLabs lab. This is a GemLabs build log — a weekend experiment wiring a real workflow with an AI coding agent. If you ship anything with a login on it, the thing worth stealing isn’t the tool. It’s the habit: a security feature you have only read is a security feature you have not added.

I leave the house with an agent halfway through a job. It’s going to finish in four minutes and then sit there, blinking, waiting for someone to type yes.

That’s the whole motivation. Not “code from my phone” — nobody wants to write code on a phone. I wanted to read what it’s doing and answer it. Approve the plan. Say “no, not that file.” Drop in one more sentence while I’m in a taxi.

Then the actual question: how do you get a phone into an AI that has no way in?

Subscribe to read the rest of this post.

#vibe-coding #ai-agent #claude-code #security #mobile #case-study