Florian

PhD Student @CISPA focusing on web security. CTF @fausecteam

[Manfred Paul @_manfp]

If you're a security researcher and in Germany, consider signing https://t.co/6x5ajjZSxq . Decriminalizing research might not be the top political priority right now, but it's still important!

[@[email protected] @Dennis_Kipker]

#Reform vom #Computerstrafrecht: Nach dem Vortrag auf dem #38C3 Ende 2024 geht es jetzt weiter auf der #republica 2025! Florian Hantke, Lilith Wittmann, Carolin Kothe, Tim Philipp Schäfers und ich haben zur Diskussion der noch offenen Fragen einen Panelvorschlag eingereicht!

[Florian @fh4ntke]

🚨 Ich habe Daten gefunden - eine ganze Menge.

„Gerade im Kontext der bevorstehenden Bundestagswahl halte ich es für wichtig, immer wieder auf die Gefahren von mangelhafter IT-Sicherheit und auf die Bedeutung von ethischen Hackern aufmerksam zu machen.“

https://t.co/AvOP9VzRBT

[Florian @fh4ntke]

@schniggie @Dennis_Kipker Schön, dass es dir gefallen hat :)

[Florian @fh4ntke]

🚝Auf dem Weg nach Hamburger zum #38C3.

@Dennis_Kipker und ich freuen uns sehr auf unseren Vortrag “Was lange währt, wird endlich gut?”, ein Vortrag über die Modernisierung des #Computerstrafrecht🧑‍⚖️

Morgen um 13:50 in Saal 1 oder über https://t.co/vRX3J6Z9NA ✌️
#hacker #law

[@[email protected] @Dennis_Kipker]

Letzter Checkup, bevor es auf nach #Hamburg geht: Gestern Abend die Präsentation fertiggestellt, heute Mittag gemeinsames Treffen für einen Probedurchlauf in Sachen #Cyberstrafrecht – und morgen um 13:50 geht es los im CCH Hamburg beim #38C3! Freue mich schon auf das Wiedersehen!

[Florian @fh4ntke]

Top series on @NetflixDE today. #MerryChristmas2024

[Florian @fh4ntke]

Wir sehen uns auf dem #38C3 🥳

Ich freue mich sehr, gemeinsam mit @Dennis_Kipker , über die Modernisierung des deutschen Computerstrafrechts zu sprechen.

Was sind die Probleme? Was gibt es für Lösungen? Und wie sieht die Zukunft der Reform aus?

[@[email protected] @Dennis_Kipker]

Das Programm vom #38C3 ist da - und wir sind dabei!! Am 27.12.2024 um 13:50 geht es in Saal 1 um die längst überfällige #Reform vom deutschen #Computerstrafrecht.
Mehr Infos zum Programm und zu unserem Vortrag gibt es hier:
https://t.co/WgYMpxEJnc

[Florian @fh4ntke]

Do you want to learn about #legal challenges and #ethical considerations in #cybersecurity research? 🔬

My colleague Sebastian Roth and I gave a talk at OWASP Germany yesterday discussing practical examples to challenge your own views 💭

https://t.co/VoEowkOyTF

[Shubham Agarwal @ap0ca1pse]

Looking forward to presenting our research work tomorrow at @acm_ccs! Join us at Web Security II Session right after lunch (13:30).

[Florian @fh4ntke]

This time of the year again. Hope we don't need the 7h :D

[Florian @fh4ntke]

@LorenzoCazz @stecalzavara Great to hear, congratulations!

[Florian @fh4ntke]

On the way to San Francisco looking forward to presenting my paper “Where Are The Red Lines”, talking about legal and ethical challenges in web security research, and meeting great people at #IEEESP2024

[Florian @fh4ntke]

Our group is looking for new PhDs. If you’re into #web #security and want to do great #research, this is a great opportunity :)

[Ben Stock @kcotsneb]

I am looking to expand my group with new PhDs! But just applying would be too boring, right? So, first you will have to solve a little bit of challenge :-) Check https://t.co/GH7MUYEK5u to learn more on what your task is! Beyond that fun, what will you do in your PhD?

[Florian @fh4ntke]

Want to hear what I think about legal and ethical problems in security research? I had a great chat about this and other topics with Annabelle as a guest on the TL;DR podcast! (German)

[Florian @fh4ntke]

I recently earned a CVE with minimal effort and it made me question the CVE system's current state. Is it truly serving its purpose? Here are some thoughts about my little experiment: https://t.co/aP6LYtHxeL

[Florian @fh4ntke]

Disappointing decision… German court sentences programmer to a 3k fine after responsible disclosure. Let’s hope that the laws change this year.

(German article)
https://t.co/j5dFcTjaP1

[Florian @fh4ntke]

@IEEESSP @LiveOverflow @_JohnHammond I just listened to your interesting discussion on ethical hacking. This paper might interest you 😉

[Florian @fh4ntke]

Can server-side scanning research be legal and ethical? For our upcoming @IEEESSP paper "Where are the red lines?" we talked to experts on law and ethics, and web operators. We discussed challenges, solutions and various fictional research scenarios. https://t.co/cTjFfiVRRl

[Florian @fh4ntke]

@IEEESSP @s3br0th @christine_utz @kcotsneb In conclusion, it is a case-by-case decision, and for every project, there are ways to perform research more ethically and legally. You can find concrete ideas and best practices when planning server-side scans in our paper. https://t.co/cTjFfiVRRl

[Florian @fh4ntke]

@IEEESSP @s3br0th @christine_utz @kcotsneb Operators we talked to value the benefit of server-side scanning, e.g., vulnerabilities disclosure. Yet, they fear negative consequences and would prefer to be informed beforehand. While most of them would not consider legal action, some might be obligated by their legal team.