Google Play is requiring every developer to declare in Play Console whether they are a trader or a non-trader, regardless of where they live. The declaration relates to rules in the European Economic Area and United Kingdom: developers who conduct commercial activity are generally treated as traders, including those earning money through app sales, in-app purchases, subscriptions, or advertising. Developers working purely as hobbyists or in a non-commercial capacity can declare as non-traders; so can developers who do not distribute apps in the EEA or UK.
The main concern is that an individual who declares trader status must provide and verify a phone number, and Google will display both that number and the developer’s address publicly on Google Play. Developers must make the declaration by February 1, 2027, and traders must also certify that they will comply with local laws. Missing the deadline has consequences beyond losing the ability to submit updates: Google says the developer profile and all its apps will be removed from Google Play worldwide. The notice therefore raises a privacy trade-off for independent developers who earn even modest app revenue, as well as a compliance requirement that applies globally despite being tied to EEA and UK consumer rules.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A URL-encoding flaw in Hugging Face Chat let unauthenticated requests bypass an admin check and trigger bulk exports of users’ private conversations. The exported data was sent to a configured dataset destination rather than returned directly to the requester. (twitter.com)
Claude Code’s “Don’t Ask Again” setting was linked to passwords and other secrets being exposed in 1,122 public GitHub files. The finding highlights how coding-agent features can accidentally put sensitive data into public code repositories. (apiiro.com)
Hackers stole $133 million from a French bank by targeting a service provider. The available details do not explain how the attack was carried out. (bleepingcomputer.com)
U.S. intelligence reportedly believes Nvidia CEO Jensen Huang had a romantic relationship with suspected Chinese spy Alice Huang, who allegedly sought access to restricted AI chips. Alice Huang is linked to Megaspeed, whose subsidiary faces allegations of smuggling $2 billion in AI chips into China. (tomshardware.com)
A report alleges China is linked to at least 18 overseas police stations in Canada, including three in the Greater Toronto Area. The RCMP is investigating reports of criminal activity connected to the stations. (ctvnews.ca)
Colframe is a low-interaction honeypot that imitates supermarket refrigeration controllers from Danfoss and Dixell. It is designed to attract and observe activity targeting these systems, including Modbus-based threats. (github.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.