thought experiment: >> if they do not want their conversations in their living room recorded, parsed by automated language models running in our datacenters, and added to their permanent record, they shouldn't have a window to a public space that vibrates. All we are doing is being in a public space, spending billions of VC money to point laser microphones at all homes 24/7 collecting data that anyone in this public space could have collected. You can not outlaw that without outlawing 5 year old Timmy riding his tricycle down the sidewalk, because we are using his right to see the light from his lamp being reflected by the houses, to justify why our creepy business model isn't a violation of millions of peoples privacy. You can't have a reasonable expectation of privacy that allows little Timmy to see, but forbids our corporation to spy on everyone, not in america. We also send electromagnetic waves out on one side off your house and collect them on the other, so we can see you move inside your house. It is basically like ham radio, anyone could do it, little Timmy sends electromagnetic waves through your house when he talks to his friend on a walkie talkie. You think Timmy shouldn't be allowed to have a walkie-talkie? We just send them through all the homes, all the time, everywhere. No we are not on your property all our devices are in public spaces <<

The idea that, if a single piece of information could be collected by a human in a public space, then mass scale collection of that and similar information at all times and in all public spaces, for any purpose by a fully automated behemoth is fine, is insane.

The USA needs to amend its constitution to define the right to privacy in a way that declares mass surveillance and systematic profiling using non-consensual data gathering at scale illegal for being the nefarious violation of basic human rights that it is, before they completely loose what little privacy they have left when they hole up in their homes.

Table 2 in the paper lists which cars where compared, and that 24% numbers is an average from comparing models where manufacturers offer EV and ICE variants.

It is different in Africa, where catalytic converters are harvested for precious metals and cars are driven without them.

This is not that. This is not even a license. They want a full transfer of intellectual property ownership. Sure that enables them to use it in a commercial product, but it also enables them to sue if contributors contribute similarly to other projects. Obviously that would create a shit storm, and there is an exception with the public license, but riddle me this: can you legally make similar contributions to multiple projects that have this type of CLA?

Let us take a step back and instead look where such terms are more common: employment contracts.

The affected version 2.73rc6 is quite interesting, because it is from 2015, and it is not the version the relevant code was introduced in, that is even older (guessing 2.62). Why fuzz some random release candidate from ten years ago?

Even more interesting v2.77 from 2017 (commits 5614413 and 2282787 to be precise) changed the code and added an (++i == maxlen) check at the place that is being highlighted by CVE-2025-12198 as lacking an (i < maxlen) check. The commit message says it fixed a crash and thanks a friend for fuzzing the config file.

Now i am not well versed in heap smashing with C, so don't confuse my lack of skill with an expert opinion, but i have a hard time understanding how that check is circumvented in recent versions of the code. Any explanation would be welcome.

But more than that someone should verify if this PoC works in recent versions. As a prerequisite it should be shared internationally.

The documents link the DMA page on the EC website: https://digital-markets-act.ec.europa.eu/consultation-first-...

Interestingly there is no published filing by Apple, yet, and the consultation is closed for two days. Maybe they filed late and publishing the feedback takes time, due to the EC reading it before putting it on their website. Or quite possibly Apple did not actually file anything as part of the official process and is instead publishing their opinion on their blog.

Except financing research and development, guaranteeing loans to reduce default risk and interest rates, capping liabilities to enable insureability at lower rates by guaranteeing to fix damages in case of critical failures with public money, financing and organizing emergency civil protection measures, as well as waste disposal, granting massive tax cuts, doing the diplomatic leg work to import uranium and protecting its transport with the police, all and all summing up public spending on making nuclear energy in germany to 169,4 billion euros according to the scientific service of the Bundestag (Document Number WD 5 - 3000 - 090/21), with the more green leaning FOES calculating 304 billion. And on top of that it is estimated that another 100 billion in public money will be needed to fix up long term waste disposal sites morsleben and asse.

... well except from those few hundred billion euros they barely ever subsidize it at all.

In the USA there exist similar forces who also introduced bills with similar ideas multiple times in the last decade. One of those is currently in congress.