How does the course-swapping site work? Is there some part that requires users to enter their credentials (email, password) on a web site that is not operated by the university? Is there some part that saves an access token or a refresh token in other place than the web browser?
Is some OAuth2 authentication flow involved so that the university has registered the application and assigned a client id and return URI?
I think the university might have valid security concerns if the application somehow accesses student accounts without valid OAuth2 authorization flow (or equivalent).
Entering login credentials for university on a third-party site is probably forbidden by terms of service for the university site.
I would like to know more about those insurances, have they bought new ones? If so, are those really going to cover anything at all they would like to be covered? If there has been negligence, breach of duty or breach of trust in the past, why would a new insurance cover those?
I didn't sign a work contract because it was written in English and there was no translation available, especially since it contained a non-standard clause related to intellectual property rights. All communication before signing the contract had been in my native language.
Google provides two alternatives for age verification, a credit card payment and sending an electronic copy of a valid government issued ID.
This explanation seems to be quite terse, "If you use a credit card, any temporary authorization will be fully refunded. If you use an ID, Google will delete the image after verifying your age."
Both methods would require me to provide them (or some other entity) new personal data. In the case of credit card payment, credit card number (and thus what bank I am using, maybe also what kind of card I have) and my home address.
My government issued ID has also other information like a photo of me, my signature, social security number, all my given names and card number. I wonder if they would accept an electronic copy that would have all those covered.
2-step verification can be turned on by going to https://myaccount.google.com/ and selecting security and then "Signing in to Google". The "2-step verification" finally leads to the point where phone number is asked for enabling SMS based verification. Only after enabling SMS based verification it is possible to enable Authenticator App (TOTP) or some other options.
At least I couldn't find other way to enable TOTP i.e. first SMS.
I'm assuming you are a consumer since consumer protection organisations were mentioned.
I would start by sending a GDPR subject data request for any personal data they have. There is a definite time limit for the response time. In case of inaccurate data, then there is right to rectification.
If there is no appropriate receipt for the 1200 EUR charge showing value added taxes charged I would ask for the receipt. Some tax agency might be interested if there is no such receipt.
I wonder how many of the fake orders could have been cancelled by the restaurants themselves if they had tried to verify the phone number of the new customer (new phone number and/or address). Maybe an SMS for verification (fails in case of SIM-swapping) or pre-payment in case of a new customer. Assuming that there are viable methods for pre-payments.
I think if they choose to avoid any kind of verification of contact information they don't have good reason to complain in cases like this.
What about General Data Protection Regulation and anonymization? My source code files usually start with copyright notice with my name and email address followed by a reference to the license. In this case anonymization may be against my interests and rights.
This kind of comment, "co-pilot can write 90% of the code without me, just translating my explanation into python", about copilot troubles me. If the code has been mostly produced by co-pilot, does an user of copilot have sufficient grounds to to claim being the author and assert rights based on copyright? Globally?
The same dog was used in all occasions: 1) sniffing of the clothes 2) around the house 3) inside the house 4) sniffing the truck.
I would question if the dog was essentially trained to recognize the smell of the suspect, and if so, did the dog really indicate it was smelling odors from a dead body or the odors from the suspect.
Also, only clothes of the suspect from an evidence room? Only one truck?
Is some OAuth2 authentication flow involved so that the university has registered the application and assigned a client id and return URI?
I think the university might have valid security concerns if the application somehow accesses student accounts without valid OAuth2 authorization flow (or equivalent).
Entering login credentials for university on a third-party site is probably forbidden by terms of service for the university site.