Florian Holzbauer

The #IETFHackathon at #IETF119 Brisbane is starting! Participants collaborate and develop utilities, ideas, sample code & solutions that show practical implementations of IETF standards. Thanks #RunningCode sponsors @ericsson, @Meta, CNNIC & @ICANN More: ietf.org/runningcode/

The 2024 Threat Detection Report is out! Featuring actionable insights for the most prevalent cyber threats and ATT&CK techniques your security team is likely to encounter. Read the full report now: redcanary.com/threat-detecti…

Phone number privacy and usernames are now rolling out to everyone using Signal version 7.0! Update your app to take advantage of these new features 🎇

Great finding by @timolongin on transitioning smuggling attacks from the web to the email ecosystem. He found SMTP to be as vulnerable with mail servers interpreting EOD sequences differently, allowing to spoof emails from gmx.net, outlook.com, ....

🎅 Sleigh bells ring, are you coding? Hackvent2023 Day 1 is live! 🚀 Click below to unwrap the first challenge and embark on a festive CTF journey. Plus, a special hidden quest is waiting for you! 🎁🎄 competition.hacking-lab.com/events/71/curr… #Hackvent2023 #Day1CTF

He did it again... @timolongin shows you how to poison the DNS name resolution of an entire country r.sec-consult.com/poison #infosec #hackerlife

Linux Fu: Easy Kernel Debugging hackaday.com/2023/11/22/lin…

@hackaday Love it, thanks for sharing <3

HotCRP - Submission tool for major security conferences, guess someone forgot to renew the certificate? 🙈

It looks like welcome progress has been made in the EU and existential threat to #encryption known as #ChatControl seems to be softening. Parliamentarians have reportedly agreed to remove clauses that give law enforcement a blank check to force encrypted services like #ProtonMail to hand over user messages, emails, and files. While this is a victory for the online #privacy movement, the devil is in the details, and we look forward to seeing the official text. It's vital the European Council aligns its position with Parliament now. Read our full statement here: proton.me/blog/eu-chat-c…

It might be 🥶 in Norway, but we're coming in hot! Here's a recording from the #ECSC opening event. 1. Let's pretend we popped a calc 2. Organizers get scared 3. A/V team disconnects the beamer 🔥🔥🔥 Hyped for the first gameday of #ECSC2023 tomorrow! @openECSC @enisa_eu

Useless use of cat😃

Setting up modern e-mail is hard! email-security-scans.org

⚠️ Confirmed: Real-time network data show SpaceX Starlink satellite internet platform is currently experiencing an international outage; reason unknown. 🛰️📉 #StarlinkDown

.@mrkaran_ shows us how to set up a home network monitoring stack built with #Telegraf, #Grafana and #RaspberryPi. Insightful post: blog.apnic.net/2023/09/01/mon… #Netops

Want to know how to stop #Zenbleed on Windows? Have a look at how to apply the Zenbleed MSR workaround on Windows. Or how a one-liner on Linux becomes an entire PowerShell script on Windows … github.com/sbaresearch/st…

@HansVanEijsden @ProtonMail Ah neat, in this case you know that your setup already validates DNSSEC. We call this prefiltering, but we mostly saw it for web clients until now. In order to conduct the other tests, you can remove these 2 addresses from the list of To addresses. Hope this helps :)

@holzsec @ProtonMail Unfortunately, I'm unable to reply to the mail. See screenshot, my Postfix which checks for DANE/DNSSEC refuses to send because of the two broken domains and gives back the error to my SMTP client 😉

Test your email provider on email-security-scans.org! We are still looking for the first one to score 10/10 - While waiting for your result, have a look at the blogpost! My setup at @ProtonMail -> Strict TLS support ✅ (! DANE < MTA-STS); IPv6 for DNS 🏗️ / 📧-delivery soon?

⚠️A while ago I developed Heimdall-WiFi-Radar, only with 3× ESP8266 it was possible to track and position WiFis devices through walls, now with the help of AI we have a new level, it is possible to know where you are and what are you doing! 😱😱

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies: samcurry.net/web-hackers-vs… Contributors: @_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__