In a kinetic warfare or authoritarian context, this is rather a life safety vulnerability. In the industry, we call this the crossover from Information Security (InfoSec) to Operational Security (OpSec), where a digital flaw becomes a Kinetic Threat.

Right, but if a country being at war or in a authoritarian regime is a precondition for the vulnerability to pose a threat, it's not really a scenario that would warrant a high scoring in some vulnerability scoring system. For sure it's a weakness and would score higher if the purpose of the technology were military.

But since this is a civilian application and not military, it doesn't seem sensible to rate vulnerabilities according to military use. The intended scope of the application makes a huge difference legally and operationally and should be triaged accordingly.

Mozilla Corp is a wholly owned subsidiary of the Mozilla Foundation. Tomayto, tomahto.

And part of the Corp's profits fund the Foundation, not the other way around. We get a discussion about this every few months in the HN comments, in case anyone wants to look it up.

Right, and my understanding is that structuring lets them do the search licensing deals that have been the lifeline of the whole org.

Loads as a regular webpage for me (Safari, black font, white background).

The main text is black yes, but anything that's bold is light grey as per the CSS, which is near unreadable (even if you're not as colourblind as me I suspect)

Only if your system/browser is set to dark mode

Sorry all, I didn't realize this was happening. I don't use dark mode at the OS level, just per app. Fixed.

It only happens if you are using dark mode. That seems to be the only difference between light and dark mode on that site.

Before tossing GDPR onto the bonfire, perhaps the EU should first look at DORA.

There's a bit of a mix-up here. The “Search History Data – Not Linked with You” label you see on the App Store refers only to the searches you perform within the Home Connect app—not your full Google search history. Given that iOS apps run in a sandboxed environment, there's no way for the app to access your Google account. It’s a standard practice among smart home devices to enhance functionality, not to spy on your entire digital life.

In refining ADCC45:AFD88B (Kingsport) in 00h 09m 59s 316ms I have brought glory to the company. Praise Kier. 1⃣2⃣0⃣6⃣6⃣ 4⃣5⃣7⃣4⃣1⃣ 5⃣2⃣9⃣2⃣8⃣ 3⃣3⃣4⃣9⃣2⃣ 0⃣9⃣1⃣4⃣9⃣ #mdrlumon #severance lumon-industries.com

I agree. Additionally, the authors haven’t considered data deletion policies. Most SaaS providers delete data within 30 to 90 days after contract termination. It’s unlikely that data from 100,000 failed startups, each using 20 to 30 SaaS applications, still exists.

Funny enough, ‘Cariad’ translates to ‘hell chariot’ in Romanian—a name that feels oddly fitting given this fiasco.

Imagine how bad software development in car companies must be - it's worse than that in reality. A giant clusterfuck of incompetence, especially from the top.

I can absolutely attest to this. Like 200%. The level of incompetence in SW is just beyond comprehension. Just mind blowing. Unbelievable stupid.

Many people are eager to plug in their air purifiers and get started, but they often miss the fine print about checking inside the unit. Leaving the plastic bag on the filter basically turns the purifier into a fan, without any actual filtering. I saw someone post that they ran theirs like that for months before realizing it—no air getting filtered the whole time! Your dust photo reminded me, so just wanted to mention it in case you hadn’t checked for the bag inside.

I replace the filter on mine every couple months. It's clear of bags and the filters are regularly filthy.

or … EU enforces strict privacy laws to protect individuals, and some companies that don't respect these regulations are getting fined as a result.