Manufacturer locked crash resets for BMS are a common theme amongst EVs, especially European ones. Exclusive to neither this model year nor BMW, although some other makes have less arcane procedures than the ISTA one.
Well, no, it's in the UK. It also has a gross weight of around 2000lbs, so it's probably not subject to any of the relaxed regulations anywhere, although I don't know how the UK homebuilt rules work these days.
Still susceptible, TPUs need DRAM dies just as much as anything else that needs to process data. I think they use some form of HBM, so they basically have to compete alongside the DDR supply chain.
It looks like it only affects dynamic reloading? If I understand correctly, the client can just politely ask the server to load arbitrary code, and the server agrees.
This should never be enabled in production in the first place. I'm not surprised that they are fundamentally vulnerable, and this is likely not going to be the last RCE in this part of the code.
It's generated code ("compiled" Javascript); I found it easier to read than the "main" diff in React which was (intentionally, I think?) obfuscated with additional changesets.
I think it's a typical retrofit outdoor coaxial cable run. The ridiculously haphazard installation method matches my usual experience with cable provider installations, too.
Video: https://www.youtube.com/shorts/089CBuGTkcY (it's also in the article; my ad blocker must have gotten me on this one). Amazon are not having a good run with these lately.
I suspect this too; between licensing and ads I bet there's a "screen type" (mobile vs. fixed/TV) that needs to be "correct" for some contract reason, and casting is skewing their numbers enough that someone called them on it.