>Do NOT use this firmware on any thermostat that is critical for your heating or cooling needs.
Also, carefully consider its use with propane or natural gas HVAC units. Many can reach dangerous temperatures very quickly. Many years ago we had a thermostat failure that caused our HVAC to not shut off. While it had an over-heat cut-out, it was for temps above 200F. Because the unit had an oversized blower, it caused our home to reach dangerous temps as we slept, including our kids room which was a good 20F hotter than our bedroom. Luckily we woke up and the kids were okay.
When federal agents, such as the FBI, attempt to question you, it is strongly advised that you do not talk to them without a lawyer present. The Fifth Amendment to the U.S. Constitution guarantees you the right to remain silent and to have an attorney. There were several instances in this account where Serafini's answers could be used to paint his involvement as not so innocent.
I'm not sure why this is getting down voted. Indeed, the FAA is the correct investigating body here as the local police department has no jurisdiction over aviation accidents. They should have immediately called in the FAA to investigate.
I've set my phone to not answer unknown callers (those not in my address list) and more importantly, I've done this for my parents as well and further instruct them as often as possible to not believe anything they get in email. With all of this, my mom still will reach out at least once or twice a year in a panic about some scam email she thinks is real.
Does detectability matter? Are we now entering an era of forced browser compliance? That is, if I use Comet exclusively as my browser; is my bank, insurance company, or news site going to force me to stop and use a "normal" browser and what will that look like as every browser also has AI capabilities? Maybe certain resources will only be available via apps? Seems like a very slippery slope and very user hostile.
As AI companies like Perplexity introduce AI enabled browsers like Comet, they will scrape web sites through the interaction of end-users with whatever site they are using. Therefore, indeed anti-bot companies are absolutely running out of runway.
If this was disclosed via a vulnerability disclosure or bug bounty program and there are no indicators of a data breach then it's effectively like the findings from a pen-test so very likely no regulatory reporting requirements.
Also, carefully consider its use with propane or natural gas HVAC units. Many can reach dangerous temperatures very quickly. Many years ago we had a thermostat failure that caused our HVAC to not shut off. While it had an over-heat cut-out, it was for temps above 200F. Because the unit had an oversized blower, it caused our home to reach dangerous temps as we slept, including our kids room which was a good 20F hotter than our bedroom. Luckily we woke up and the kids were okay.