

“You’re the vulnerability”


“You’re the vulnerability”


I don’t understand how this can still happen with a well known brand in 2026. Personally the microphone is the least concerning aspect of this finding, since a Bluetooth connection would still be required. With more dedicated research, the BadUSB aspect is far more concerning in my book. Plug the speaker into a computer, even once and only to charge, and the computer is pwned? Preventing any future patching? I don’t know how I could ever trust one of these devices going forward.


I suppose that depends on your definition of a cybersecurity risk. Unfortunately it likely won’t matter to them unless it starts affecting their bottom line.


I don’t understand the purpose of your comment. That word exclusively appears twice in the twelfth paragraph, and makes complete sense in context. I think the write up is incredibly detailed but also easy to understand.


Awesome write up.
Allowing arbitrary firmware updates without any signature validation, over Bluetooth, even unpaired and in sleep mode, and without any authentication is absolutely wild and should be criminal negligence.
It took Creative nearly two months to respond to SingCERT. Unfortunately, their response was that “they do not consider this to be a vulnerability, as it does not present a cybersecurity risk”
What a foolish response. The guy wasn’t asking for money and gave them everything they would need to make a patched firmware.


Agreed.
I don’t mind paying a reasonable price for access to SSO, especially if the service is fully provided by third-party infrastructure. For something that is fully self hosted on the other hand, a recurring cost for what should be a basic (or at most a one time reasonable fee) feature feels egregious.


Yes I already do so, but this dashboard requires an enterprise license to also use OIDC.


This looks really cool, but I wish that OIDC wasn’t tied to an enterprise license that doesn’t show a price (just a contact us form and email address) and requires annual renewal.
I’d be willing to pay a reasonable one time fee to unlock OIDC support, and I understand why they charge a recurring fee for the other enterprise license features, but as it currently stands this doesn’t really make sense for a home lab.


They don’t mess around with their requirements either and strictly enforce them. If you don’t follow their rules and your domain is deleted, there is no refund or recourse.


That’s usually determined at the registrar level, not the registry level, though of course there are always exceptions.


Some ccTLDs have strict requirements (looking at you .de), but most are fairly standard TLDs. The last time I checked, .tv (for Tuvalu) was responsible for something like 40% of the country’s GDP, so it’s not surprising that most ccTLDs are welcoming to outsiders.
Edit: I was curious so I double checked, and apparently as of 2019 .tv was closer to 9% of Tuvalu’s Government spending according to Wikipedia. In my defense, the last time I researched the matter was several years prior to 2019, and additionally I have no doubt that I’m misremembering and/or unintentionally exaggerating that figure.
Regarding .de domains, I’ve seen multiple examples of a registered domain being completely deleted with absolutely no refund or recourse because the Registrant/Admin contact(s) didn’t respond to a physical letter sent by DENIC via post in Germany.
I hope the launch goes well, I’ll certainly give it a try.
I didn’t find anything wrong with it on Mac, it was a perfectly cromulent browser. And anything that can help dethrone the chrome monopoly is a win in my book.
I’ve used it on both macOS (Intel and Apple Silicon) and iOS.
On macOS it’s been fine, but nothing about it was unique or beneficial enough to make me switch to it as my default browser. I imagine the experience on Linux will be similar.
On iOS, I’ve been daily driving it for almost exactly a year. At first it was very buggy, and I once lost all of my opened tabs. But for the past 6-8 months it has been very solid, and is the only browser on iOS that allows me to use both ad and sponsor block plug-ins to my knowledge. Tab groups are also fantastic and easy to manage.


I feel like I have been expressing the other perspective in great detail, but I also don’t feel like you have meaningfully engaged with that perspective and have instead focused on my personal beliefs. Perhaps that’s an effort to protect your own beliefs, for fear that such engagement might cause you to question things that you consider fundamental to your understanding of the world and your self identity. I can’t say for sure, but I can say that I have personally been in that position and felt that way.
Even if we assume that there is an objectively moral decision in this scenario, we can never know with absolute certainty without asking God directly. Even the wisest scholars of what we do have of God’s word disagree on its interpretation, which leaves humanity with a lot of ambiguity.
I always enjoy discussing philosophy, and agree that this has been an enjoyable discussion. I wish you well, I hope you have a wonderful day, and I hope to engage in similarly enjoyable conversations with you again in the future.


Based on that response, it seems to me that you are claiming that your knowledge and understanding of the Qur’an is in fact infallible and prophetic.
I am in no way saying “the thing cannot be said,” I am saying that I agree with both perspectives equally. I believe that murder is wrong and that saving people’s lives is just, but when those two options are in conflict there is no objectively correct answer. The fact that who is on either side of the track results in potentially different answers proves that no choice is always morally correct, in my opinion.
Stress testing the framework is where philosophy is the most interesting in my opinion. There are many parables in God’s word, and these stories also make us consider morality and truth, and in many ways stress test the framework.


Please try to remove any personal connections from the scenario. Remember, all participants are strangers.
I’m giving a counter argument to your own without taking any stance of my own, because I personally don’t believe that either answer is more or less moral or correct.
Would you say that murder of an individual is always more moral if multiple lives are saved as a result? Would you murder an innocent person in cold blood so that their organs could be used to save multiple lives?
I don’t currently personally believe in God, but if a God does exist, I think it would be foolishness and hubris to assume that any human could ever predict how that God would judge any situation.


“Nearly everything” seems a bit hyperbolic, but I absolutely agree that it’s a major problem that has caused, and will likely continue to cause massive unnecessary suffering worldwide.


We should all imagine imaginary numbers together.
I’m sorry to say it but now I’m even more confused.