Watch the video, transcript and sources
- French fridges forced into defrost
- Rust lifetime checks bypassed
+ Apple introduces HomeViewHackers forced supermarket fridges in France into defrost. Stores threw food away. France's official recovery warning explains why a factory reset can leave equipment vulnerable. Supermarket refrigeration systems are the equipment that keeps fresh and frozen food cold. A controller tells the equipment when to cool and when to melt ice off its cooling parts. Retailers in France say attackers changed those controls, leaving staff to discard affected food.
Coopérative U's chief, Dominique Schelcher, confirmed the attack on Monday. Refrigeration specialists joined store teams to restore service. Today, Apple unveiled HomeView, and Rust developers investigated a memory safety bug. Defrost is routine maintenance. Ice builds up on the cooling parts and gets in the way. A normal cycle melts that ice, then cooling resumes. Keeping defrost running puts the food at risk. Reuters reports that Intermarché's owner said affected fridges heated for six hours. Maintenance companies adjust refrigeration through internet-connected control panels. Someone who takes over a panel can change equipment settings. One legitimate feature does damage for an illegitimate user.
A witness in Paris described staff discarding carts of thawed food, with melted ice cream spilling onto the street. The incident response includes cleaning the pavement. Your monitoring dashboard rarely has a column for that. Store counts differ across reports. Dutch retailer Ahold Delhaize also suffered disruption. Ahold said it had no reason to link its incident to France. The French refrigeration attack is established. A single coordinated attack across every reported country remains unproven. France's official cybersecurity response team published an alert. Today's update names Danfoss, Copeland and Dixell controllers. It says management interfaces should stay off the public internet. It leaves the attackers' identity and exact entry route unexplained.
Remote access lets maintenance crews adjust equipment without driving to every shop. The challenge is keeping that convenience behind controlled access. Designers have two customers to protect, the technician using it and the store relying on it. The advice is to remove public exposure, check the configuration, and restore access through a protected network. Store operators should coordinate with their refrigeration provider. Cutting the connection can interrupt monitoring required by an insurance contract. Meanwhile, Rust has a safety problem. Rust is a programming language whose compiler checks memory use before code runs. Its borrow checker tracks references, which are handles to data. Those handles should become unusable when the data is gone.
Developer jsnell reported code the compiler accepts. The example keeps a reference to some text after that text's lifetime ends. The reporter says a memory checking tool catches the invalid access. A container promises its reference can last for the whole program. Assigning a shorter-lived reference into its field gets past the reported checks. Cleanup treats that reference as long-lived. The promise survives after the data disappears. The report reproduces on recent stable versions. Contributors show related examples back to Rust one point four. The issue is marked high priority. At our source check, it remains open, with no linked fix.
The thread filled with simpler examples. It also gives maintainers more ways to test a repair. A bug report gets more useful when people bring reproductions instead of declaring every application dead. Follow the eventual compiler fix. These examples establish specific unsafe outcomes from accepted code. The thread provides no evidence that every Rust application hits this path or that attackers are exploiting it in production. Apple's HomeView is a seven-inch smart display for calls, entertainment and compatible home accessories. Preorders start today, with availability on November thirteenth. The American starting price is two hundred ninety-nine dollars. Siri becomes another resident who needs somewhere to charge.
Apple says HomeView recognizes up to six people. The shared kitchen screen has to decide whose calendar it should reveal. That's a privacy problem when a dinner guest stands in front of the camera. HomeView must recognize the enrolled person's face. Their paired phone or tablet must be present and recently unlocked. The devices normally share the same wireless network. Those conditions control when personal content appears on the shared screen. Siri's new features begin in English, in beta. Apple says some server-based features have daily usage limits, with expanded access available for a fee in the future. A kitchen assistant apparently develops a subscription appetite.
Apple says HomeView won't be sold in the European Union while Siri's new capabilities are unavailable there. For European households, the smart-home upgrade is watching an American press release. No installation appointment required. Each promise needs a boundary that holds. Refrigeration maintenance needs restricted access. Rust needs to reject references that outlive their data. HomeView needs to keep personal content tied to the right person. Ordinary features can have expensive consequences. Here's the reset detail. France's alert warns that a factory reset alone is insufficient for exposed, end-of-life equipment with no available security patch. It can remove attacker changes while leaving the device vulnerable. Recovery needs protected access as well as clean settings. The door needs fixing after the intruder leaves.
Verdict: NEEDS REVIEW — Protect access before restoring service
Sources
https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/
https://x.com/schelcher/status/2109564928881308012
https://www.abc.net.au/news/2026-10-13/french-supermarkets-hacked-causing-fires-and-food-loss/107258724
https://www.danfoss.com/en/service-and-support/articles/dcs/the-secret-behind-danfoss-adaptive-defrost/
https://github.com/rust-lang/rust/issues/164250
https://www.apple.com/newsroom/2026/10/meet-apple-homeview-a-new-way-to-enjoy-entertainment-and-manage-the-home/
And that's the diff for today. I'm Niko from Axrisi. Merge responsibly.
YouTube · Newsletter · thedailydiff.dev · forward this to the intern who deployed on Friday.