ESTA allows you to stay up to 3 months, no change of status allowed. B1/B2 allows a maximum of 6 months, with the possibility to change status without leaving the country.
> The main reason I did not reach out with the theory instead of the proof-of-concept was because I believed that it would be ignored due to lack of evidence (as is my experience with past disclosures)
I just looked at the suggested friends page: among the first recommended friends there is a person I've never met in person, but a friend of mine sent me a picture of their business card via Whatsapp. I sent this person an e-mail a couple of days ago, but it was gmail -> gmail.
Maybe this person stalked me and that is why she appeared on my suggested friends page?
I'm amazed, they even said that the first million e-mails were on them, and then totally ignored their promise and the blocks that we purchased previously were useless.
They could have perfectly increased their price (even 2x would've been fine) and we would have paid for it. The only thing that is holding us are the dedicated IP addresses, which will be a pain in the ass to whitelist with our clients again.
In Santiago, Chile, the public transportation system uses Mifare Classic cards, and few apps that (ilegally) refilled the cards appeared a while ago.
The solution given by the government was to block the cards that were used with fraudulent refills on a weekly basis, but there is always the possibility of changing the ID or purchasing blank cards.
Of course the system was chosen years after the vulnerabilities were discovered, too.
My guess is that the only way to stop this is to replace all the scanners, which will be far more expensive than losing a few thousand paying customers per day.
I disabled the upstream check (IIRC) in the AP, and I only have to turn the server on when reconfiguring. I was against Ubiquiti for this reason, but after using it I'm glad we chose it.