Beretta_Vexee

That’s not true; the only way to be found guilty following a CRA is to conceal the active exploitation of a vulnerability, fail to alert the national coordinator, fail to propose a mitigation within a reasonable timeframe, or be openly negligent in the management of the cybersecurity of one’s products.

“Please stop using this version of my product or this particular feature; it is vulnerable” is an acceptable mitigation measure.

A CVE isn't an active exploitation and don't trigger anything.

This vicious European Union, which stifles innovation and works against the public interest – for example (checks his notes) by mandating USB-C charging and replaceable batteries!

You are confusing two different articles. The 24-hour deadline relates to notifying the national Computer Security Incident Response Team in the event of the detection of a confirmed exploited vulnerability of one of the manufacturer’s products (Article 14). Submitting a bug report and opening a ticket does not constitute a confirmed exploitation in the wild. Nor does the publication of an exploit or a PoC constitute a confirmed exploitation of the vuln in the wild.

The part that’s probably bothering Google is this:

> 6. Manufacturers shall, upon identifying a vulnerability in a component, including in an open source-component, which is integrated in the product with digital elements report the vulnerability to the person or entity manufacturing or maintaining the component, and address and remediate the vulnerability in accordance with the vulnerability handling requirements set out in Part II of Annex I. Where manufacturers have developed a software or hardware modification to address the vulnerability in that component, they shall share the relevant code or documentation with the person or entity manufacturing or maintaining the component, where appropriate in a machine-readable format.

To put it very simply, the CRA calls on all stakeholders to cooperate in reporting incidents and vulnerabilities, establishes a national coordination mechanism, and aims to address vulnerabilities swiftly in order to maintain essential services within the European Union.

These reactions are reasonable and are largely due to the US sanctions imposed on European judges at the ICC.

Nicolas Guillou, the French judge, has had all his bank assets in the US frozen; he has been banned from all US digital services (Google, Apple, Visa, Mastercard), as have many of his familly just in case.

There are literally proven war criminals who are not treated in the same way.

"If they do not, the United States will continue its campaign to dismantle the ICC, brick by brick, until Americans are threatened no longer."

- Are We the Baddies?

The A-12 was not developed from scratch, whether in terms of its design, production facilities or in-house expertise.

Design is a very different matter when you have a workshop full of skilled workers and machinery right on your doorstep, who can critique your work and explain what they can and cannot produce. A lot of engineers discovered this the hard way when companies started outsourcing to the other side of the world and lost control of production process.

Designing parts that look nice but are impossible to machine or assemble is simple.

Designing the plane may only have taken four years, but training the staff, organising the workshops and mastering the production tools took much longer.

Just look at the struggles faced by all the organisations that stopped producing anything for a long time and then wanted to restart production. Whether it’s ships, aeroplanes or nuclear power stations, each time it takes something close to ten years to restart.

When they manage to do so.

The assembly of the tube bundle in a nuclear steam generator is still carried out mainly by hand, using hundreds of shims, anti-vibration bars and supports.

At the other end of the spectrum are stamped-plate heat exchangers, which are mass-produced using a press line.

Each has its own specific application, and they are neither comparable nor interchangeable. The comparison makes no sense.

> with CNC and robots we can achieve far superior results for a fraction of the cost.

This is only true for mass production, where the set-up costs are spread across thousands of units. For small batches, the cost of automation often exceeds the cost of the batch itself. CNC machines are not magic; they require qualified and competent staff.

The same applies to quality control, fitting and assembly.

I don’t think they’re planning to start mass producing of SR-71s.

> because the job had become obsolete

You are greatly underestimating the number of parts, welds and inspections carried out on critical equipment that are done by hand or in small batches by highly skilled workers. The fact that they use a CNC machine does not make their job obsolete. In fact, quite the opposite is true, its require more skills.

Apart from the turbine section, virtually nothing on a helicopter is produced with a high level of automation or in large batch.

So titanium alloys are not completely resistant to all forms of corrosion. They are particularly prone to galvanic corrosion, which means that specific tools must be used, all forms of ferritic contamination must be avoided, special tools must be used, and they must be stored separately, etc.

This is very labour-intensive, which is why it is generally carried out in dedicated workshops, with specialised equipment, and so on, by staff who have been specifically trained and do nothing else.

If you add jigs, production-specific tools, and so on, all of that has been lost and needs to be recreated: staff need to be trained, QA defined and workshops need to be reorganised. This can take decades to return to the expected standard. You can throw as much money at this sort of problem as you like without actually being able to speed things up.

Finding the drawings and dimensions is the easy part of reverse engineering a mechanical device. The real challenges lie in identifying the manufacturing processes and quality control procedures, and achieving the expected performance with an acceptable scrap rate.

If I place a monocrystalline turbine blade on your desk, you’d be able to draw up the plans for it. But that would tell you absolutely nothing about the processes required to produce a monocrystalline ingot of a nickel superalloy.

Source: former mechanical engineer in the nuclear industry, managing obsolescence was one of my day-to-day tasks.

There are a whole host of microstates and more or less autonomous overseas territories that use the euro. If Mayotte can use the euro even though the island is on the brink of collapse, I don’t see why that would be a problem for Iceland.

I don’t think this is a problem for the EU – quite the opposite, in fact. It strengthens the euro’s position in international trade, increases the number of users and boosts the volume of trade. More customers for the EU’s financial services sector.

There are a number of countries that unofficially use the US dollar as their currency for major transactions without asking anyone’s permission (Cambodia come to mind).

This is one of the main reasons for the discussions. The Icelandic króna is a very small currency that fluctuates significantly. It is a small economy, and the difference in currency complicates access to European financial services. Switching to the euro would enable them to eliminate exchange rate risk with their main trading partners.

There are countries outside the EU that have switched to the euro for this reason, such as Montenegro and Kosovo.

One of the factors leading them to reconsider EU membership is monetary policy. The Icelandic króna is a very small currency that fluctuates considerably. Switching to the euro would protect them from exchange rate risks with their main trading partner.

One solution for Iceland would be to join the eurozone without becoming a member of the EU, as Kosovo and Montenegro have done. However, this would only be desirable if there really is a deadlock over fishing rights.

There’s a small cinema in Paris that still screens 'The Rocky Horror Picture Show' once a month; at certain times of the year, there’s even a troupe of amateur actors.

When I went to see it, it was a joyful shambles, with rice, water, ad-libbed lines, and drag queens surfing the audience.

It’s a step in the right direction; the alternative would be to do nothing whilst waiting for a perfect text that will never materialise.