Michael Roland

Security researcher at @insjku/@jkulinz
Now on

[Michael Roland @_mroland]

Offensive #security goes #art at @ArsElectronica Festival 2020 😎 We will turn a whole building into a musical instrument by hacking into the access control system at @jkulinz campus

https://t.co/wlK2xk4KwI

[Mario @blu3r4y_at]

Here is the write-up of the full exploit - explaining the XSS vulnerability, the CSP bypass with a JPEG/JS polyglot, stealing browser cookies, and finally exploiting an XXE in the admin panel to read arbitrary files from the victim server. (5/5) https://t.co/2mP1PL0hiU

[Michael Roland @_mroland]

Wie man alle OWASP Top 10 abkassiert! Heute haben wir auf der IKT-Sikon erste Details zu CVE-2023-3654/3655/3656 präsentiert. Kompletter Report https://t.co/YZqjsAg4vw tl;dr wir wurden unfreiwillig zu ehrenamtlichen Admins auf hundeten Registrierkassen in der Gastronomie.

[Michael Roland @_mroland]

Time to move on ... https://t.co/DUzk5oCK6V

[Michael Roland @_mroland]

See also https://t.co/vM2RARNG3w for an initiative that happened in parallel.

[Michael Roland @_mroland]

While I'm strongly in favor of effective measures against child abuse and exploitation, client-side scanning and weakening of of end-to-end encryption in popular messengers can't be the solution. We explain our arguments in an open letter today: https://t.co/mJ1j3iddb1

[Michael Roland @_mroland]

@usenix @YouTube @Google Thanks @TeamYouTube my channel and all my videos are finally available again :-) Seems after all YouTube wants to be a place to share #research results from @jkulinz & @fhhgb

[Michael Roland @_mroland]

My video "Cloning Credit Cards" (#research published in @usenix WOOT'13) is reason for @YouTube to suspend my channel due to "Content intending to sell certain illegal or regulated goods and services" ... WTF? Is this @Google understanding of support for the research community?

[Michael Roland @_mroland]

@TeamYouTube How long will it take for my channel & account to be back online? For now the channel is still inaccessible and the sign-in button redirects to an information that my account access to YouTube is still suspended.

[Michael Roland @_mroland]

(9/ ) Not sure what else I could do. Seems @Google is clearly against #reseachers publishing their work on @YouTube

[Michael Roland @_mroland]

(8/ ) Following @TeamYouTube suggestion to use the appeal form (again) resulted in the decision "We reviewed your channel carefully, and have confirmed that it violates our Community Guidelines." (AGAIN! and within 9 minutes after filing the appeal)

[Michael Roland @_mroland]

@TeamYouTube Did that (again), but the e-mail clearly stated that this is already the decision of an earlier appeal (that I had filed in August 2019!)

[Michael Roland @_mroland]

@TeamYouTube Thanks for the quick offer for help :-) here's the channel URL: https://t.co/i3m3UgtWLa (YT/channel/UCVZw7RKLsjChsTYHlN4hemw)

[Michael Roland @_mroland]

@rene_mobile @insjku @jkulinz @fhhgb @fhooe any ideas what we could do about this? Certainly we should avoid to use YouTube for preseting our research in future ...

[Michael Roland @_mroland]

@usenix WOOT'13 was even sponsored by @Google ... and no, the video is neither selling nor promoting good or services, it presents research results