ITAR is dumb madness: A canadian software company, doing business with french hardware manufacturer for a canadian client has ZERO connection to the US, but still under full control and compliance because of... the nature of the hardware

Tangential question for third-country nationals in Berlin (like me right now): Does the Berlin immigration office readily give EU Blue Cards to people in that arrangement, or do they say it's really a form of self-employment because you own the company you're working for? And do the public health insurance funds treat this as employment or self-employment for purposes of qualifying for public health insurance, for people who don't yet have that?

Of course, the immigration question wouldn't matter for other immigration situations like holding German or EU citizenship, German permanent residence or EU long-term permanent residence, family reunification permits, or anyone who actually gets explicit approval to be self-employed. And the health insurance question wouldn't matter for people switching from employment (with public health insurance) to self-employment.

One CVE is in Wallet and Citizen Lab mention PassKit. My guess is that BlastDoor deserializes the PassKit payload successfully, then sends it to PassKit which subsequently decodes a malicious image outside of BlastDoor.