Just put normal test pads next to the tag connect, a bit more spaced out. A bed of nails in the production line connects to that, the tag connect can be used for bench development.
A lot of low population density cellular backhaul runs over satellite. Two factor SMS or voice can be directly intercepted, assuming encryption is not used.
A solar panel is like a normal silicon diode. The voltage over the cell goes up drastically with lower temperatures. In cold climates crowbars are usually added.
Usually yes, but it is not an EU-wide system. Contact your spectrum regulator and ask for what options are available for private 5G[1]. You can likely get a bit of spectrum in the 1.8GHz guard band, around 2.3GHz, or somewhere between 3.4-5GHz. Price is from free to thousands of euros, depending on the country, transmit power and whether you are using outdoor cells. A private mmWave cell will almost everywhere need to be under an experimental/R&D license (we don't have public mmWave networks).
If you can choose, it's best to take a TDD license, as the duplexer required for FDD base station operation is a relatively expensive device when operating on an uncommon band.
1) Private 4G wasn't really a big thing in EU, but in most countries the license you get is technology neutral and can be used with a 4G base station as well.
PS: Connecting the private LTE to the public telephone network with a publicly reachable number requires a public telecom operator permit in some countries. You will also need to pay for the block of phone numbers. Roaming to the public cellular network requires many extra things which are not cheap or easy to obtain. And of course you need to have a roaming agreement with the other operator.
A very far stretch: You have a ESP32 based Bluetooth dongle, that exposes its HCI interface to the host. You have already gained access to the host and can now load code to the dongle.
Not really a vulnerability, and many types of bluetooth dongle firmwares can be updated by the host...
The people in these talks go quite a bit further than just BLE packet TX/RX (which you can do with the documentation on most chips). In theory this work allows implementing a totally different protocol.
The interface to configure an eSIM is standardized, there is no need to use the proprietary app. You might even be able to configure it with the software included with the phone OS.
I worked on this long ago, the main problem with the poor sound quality is that the self-mixing process is non-linear, a good approximation is squaring the output signal.
To improve the quality you can pre-distort the output signal. Taking the square root works quite well, but expands the bandwidth significantly (infinitely, in theory). There is a lot of literature on pre-distortion with bandwidth constraints for telecom power amplifier linearisation. You will also need a linear amplifier to power the array.
The ultrasonic transducers used in this post are very narrowband, having a resonance peak of merely a few 100Hz. You can reduce the Q factor with resistive loading but the output power significantly drops. It seemed these transducers quickly start making an audible whining noise when used for continuous transmission at higher powers. I don't know what caused that, apart from this effect they seemed to hold up for essentially infinite duration.
Using a larger wideband ultrasonic transducer instead of an array of small narrowband transducers again increases the sound quality a lot. We did not find a commercial supplier of such transducer for a reasonable cost, but made some improvised custom electrostatic ones with conductive foil. There is a lot of literature on how to construct ultrasonic transducers but this is not my field.
You will not be able to play bass notes due to physics, the power required would be insane.
That functionality is absolutely non-trivial. There are a few WiFi cores (digital and RF) you can license but they are expensive and the analog part uses a lot of die area. If you look up die shots from the ESP chips, you see that the radio is more than half of the die.
Espressif apparently has their own WiFi implementation, which makes sense as they are a major vendor of very cheap tablet and cell phone WiFi radios. This is likely why they can offer that feature so cheaply.
It's very unlikely IMHO. Both the RISC-V and the M33 are very tiny in die area, compared to for example the 512kB RAM, or even compared to a few bond-pads.
Making a single core with two instruction decoders but a shared register file, caches, prediction logic and ALU would make sense for a very high-end application processor type core, but not for these small devices. You would also need an instruction set license from ARM for that, vs just licensing the M33 netlist.