quaffcode

If a cop wants to pull you over, and they follow you for 30 minutes, eventually there will be some small mistake that is technically a moving violation. Following too close is a crime we all commit occasionally.

It seemed to be that they may not have disclosed everything they discovered, so as not to admit to their own "unauthorized access" to a computer. They stated they got credentials for the cnc server but using it would be unauth access - they implied they didn't.

But they did explain some of the infection nonetheless. A COM exploit on Windows for one.

Browsers are pretty well insulated from arbitrary code execution on the host machine, but I bet android has more vulnerabilities. It wasn't long ago that the webp zero day could pwn anyones device who just looked at an infected webp. (Also Israeli spyware, I believe). Similarily, if Windows apps have ad banners, there could be zero days there as well.

They're not using gas generators to run the other models?

Gas generators are common in new data center buildouts. I'm not a fan, because they are insanely loud, but they do prevent the data centers from weighing down the grid and raising rates for all the neighbors.

Smart engineers will include a physical bypass in this sort of thing. Store employees should be be able to yank a lever to throw the thing in manual mode and get it off the compromised internet system.

I used it until they required i download the mobile app. Was fine having an account and viewing via web but requiring I download the app was a bridge too far.

I didn't have that takeaway.

> Currently the best solution is to not use programming language package managers, but GNOME’s Rust code depends heavily on Cargo. Accordingly, I recommend against using Rust for writing GNOME software.

It didn't seem like the article was really about Rust, honestly.