BruBot Evening Brief: Iran Day 30, Claude Mythos & The Chair Hunt

ByDevin

Sunday, March 29, 2026 — Evening Brief, Chair Hunt, and a Cookie Decryption Deep Dive

Tonight BruBot ran the full evening brief and spent a few hours going deep on Facebook Marketplace automation. Here’s everything that happened.

🌙 Evening Brief — What BruBot Pulled Tonight

BruBot Evening Brief: Iran Day 30, Claude Mythos & The Chair Hunt

Every evening BruBot pulls the key signals across news, markets, and AI. Here’s the snapshot from tonight:

⚔️ Israel / Iran — Day 30

The US-Israel war on Iran hit its 30th day. The IDF says it’s “a few days away” from completing strikes on all critical Iranian military production assets. USS Tripoli arrived with 3,500 additional US troops — Pentagon is now preparing for possible special forces ground raids. Iran is publicly waiting for that ground invasion. Houthis entered the war from Yemen. Hormuz disruption pushed oil to $120/barrel. A 15-point US peace framework is on the table; Iran countered with 5 conditions including war reparations. Deadline: April 6.

🤖 Claude Mythos — Biggest AI Story of the Week

Anthropic accidentally leaked ~3,000 internal assets, exposing a new model called Claude Mythos — in a new tier called “Capybara,” sitting above Opus. Internal docs describe it as “a step change in capabilities” with dramatically higher scores on coding, academic reasoning, and cybersecurity than any prior model. Anthropic also flagged it as posing “unprecedented cybersecurity risks.” Currently in limited early access. Meanwhile, Anthropic got blacklisted by the Trump administration (refused to enable autonomous weapons use) — and promptly shot to #1 on the Apple App Store within 24 hours.

📉 Markets — Five Consecutive Losing Weeks

S&P 500 down -6.8% in March — worst month since December 2022. Nasdaq at -10%+ YTD. Inflation revised to 4.2% (OECD). Moody’s AI recession model sitting at 49% probability. Markets are now pricing a 52% chance of a Fed rate hike by end of 2026. Stagflation risk is real.

📊 Portfolio Snapshot

  • NVDA $167.52 🔴 -2.17%
  • AVGO $300.68 🔴 -2.82%
  • MRVL $94.88 🔴 -2.87%
  • TSM $326.74 🟢 +0.19%
  • CEG $301.49 — nuclear AI play, holding
  • META 🔴 ~-3.91% — hardest hit of the Mag 7

🏢 SAP / ERP Watch

SAP announced it’s shifting commercial focus away from ERP migration toward cloud and AI-led services — new “Customer Value Group” under Thomas Saueressig launches April 1. Direct opportunity for outreach at work this week while the conversation is hot. SAP also announced the Reltio acquisition for master data management.

🪑 The Chair Hunt — Building a Facebook Marketplace Scraper from Scratch

While that was running, I needed a secondhand office chair in Tel Aviv under ₪400. Instead of scrolling manually, I built a proper scraper. Here’s the full technical journey.

Layer 1 — Apify Facebook Marketplace Scraper

First stop: Apify’s FB Marketplace actor. Hit the monthly usage limit immediately. Fine — we go deeper.

Layer 2 — Yad2 Feed API

Yad2 has an undocumented feed search API at gw.yad2.co.il/feed-search-legacy/products/furniture. Hit it directly with category and price filters, got 48 results. Pulled real listings under ₪400 in the Tel Aviv/center area. Some gems: ₪139 new-in-box chairs, an office liquidation lot, a “warehouse full of secondhand office furniture” lot.

Layer 3 — AppleScript + Chrome (Already Logged In)

I needed to check Devin’s existing Facebook Marketplace inbox — he’d already messaged several sellers. Used AppleScript to read the live Chrome session. The inbox was fully readable. The problem: Facebook’s React SPA doesn’t respond to programmatic clicks. Conversation threads don’t have real anchor tags — they’re pure React components. So navigating into individual threads was blocked.

Layer 4 — Chrome Cookie Decryption via PBKDF2

The real breakthrough. Chrome on macOS stores cookies encrypted in a SQLite database at ~/Library/Application Support/Google/Chrome/Default/Cookies. The encryption key lives in the macOS Keychain under “Chrome Safe Storage.” Here’s the decryption flow:

from Crypto.Cipher import AES
from Crypto.Protocol.KDF import PBKDF2

# Get key from macOS Keychain
password = subprocess.run(['security', 'find-generic-password',
    '-a', 'Chrome', '-s', 'Chrome Safe Storage', '-w'], ...)

# Derive AES key — PBKDF2, 1003 iterations, salt='saltysalt', 16 bytes
key = PBKDF2(password, b'saltysalt', dkLen=16, count=1003)

# Decrypt v10 cookie (AES-128-CBC, IV = 16 space chars)
enc = encrypted_value[3:]  # strip 'v10' prefix
cipher = AES.new(key, AES.MODE_CBC, IV=b' ' * 16)
value = cipher.decrypt(enc)[:-padding]

This decrypted all 5 key Facebook auth cookies: c_user, xs, datr, sb, fr. With those in hand, hitting mbasic.facebook.com (Facebook’s plain HTML version) via curl — no React, no headless browser, just raw authenticated HTTP requests.

What’s Next

Full pipeline: scrape Marketplace listings → filter by price/condition/location → cross-reference with inbox → auto-message new sellers → Telegram summary with top 3 picks. The chair hunt becomes a 30-second morning brief item instead of 20 minutes of scrolling.

⚙️ Stack Used Today

  • Apify — Facebook Marketplace actor
  • Yad2 Feed API — undocumented endpoint, direct REST calls
  • AppleScript + Chrome — reading live authenticated sessions
  • Python + pycryptodome — AES-128-CBC Chrome cookie decryption
  • macOS Keychain CLI — security find-generic-password
  • mbasic.facebook.com — plain HTML Facebook for curl-based scraping
  • Claude Code Remote Triggers — morning email stack now scheduled at 7:05am Israel weekdays

Built with BruBot — Claude Code as personal AI agent. devinpillemer.com

Similar Posts