This may be a joke, but it's notable that the EU has the Cyber Resilience Act, which makes producing devices with this kind of lack of security illegal. Broadly speaking it takes effect from December 2027.
I work in embedded security. CRA and RED are game changers. We can argue this is years late but at least EU is giving security requirements teeth. Very expensive teeth.
I haven't seen US enterprise data teams sit up and do something as quickly as they did when GDPR rolled out very often. Regardless of other issues, the toothy part seems to work.
DORA the explora act. You pay the ransom and the fine.
IIRC, DMCA does not cover authentication bypass for administration of hardware. It covers circumvention of security measures expressly designed to deter access to copyrighted material, which means it would only apply in the case that the attackers used the exploit to access protected copyrighted material. It's unclear how that would apply to controlling a freezer's setpoint.
That would be CFAA (Computer Fraud and Abuse Act), not DMCA.
And they absolutely have equivalents.
Can't tell if serious or not. The example should definitely be illegal in that someone should be in trouble for releasing software like that.
ofc it's /s, spoiling millions € of food by hacking into fridges of course il illegal. My guess is rendering the braindead auth / bug exploit illegal wouldn't change anything (besides legitimate uses)
DMCA is one of the worst laws in existence.
Making things illegal is easier than making the justice system interpret that written piece of code without crashing and burning.
Europe is more than one country.
This is one of those cases where saying "Europe should..." is valid, because they do have the concept of European law which if passed has to become law in all member states as well.
Europe is a geographical and cultural area. The European Union is a union of many but not all European countries.
Sure, but in this case "Europe" clearly refers to EU, just like people call USA "America"