Florian Holzbauer

Yes, we scan! - keeping track of the Internet 🌐 | @SBA_Research; @univienna

[@IETF @ietf]

The #IETFHackathon at #IETF119 Brisbane is starting! Participants collaborate and develop utilities, ideas, sample code & solutions that show practical implementations of IETF standards. Thanks #RunningCode sponsors @ericsson, @Meta, CNNIC & @ICANN More: https://t.co/BLWcTwTih4

[Red Canary, a Zscaler company @redcanary]

The 2024 Threat Detection Report is out! Featuring actionable insights for the most prevalent cyber threats and ATT&CK techniques your security team is likely to encounter. Read the full report now: https://t.co/rldTW4yHbC

[Signal @signalapp]

Phone number privacy and usernames are now rolling out to everyone using Signal version 7.0! Update your app to take advantage of these new features 🎇

[Florian Holzbauer @holzsec]

Great finding by @timolongin on transitioning smuggling attacks from the web to the email ecosystem. He found SMTP to be as vulnerable with mail servers interpreting EOD sequences differently, allowing to spoof emails from https://t.co/qPPasgmX6H, https://t.co/LFO0CoBV7H, ....

[Timo Lo(n)gin @timolongin]

Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing!
https://t.co/cvm8MgxM04

[Santa Claus @hackvent]

🎅 Sleigh bells ring, are you coding? Hackvent2023 Day 1 is live! 🚀 Click below to unwrap the first challenge and embark on a festive CTF journey. Plus, a
special hidden quest is waiting for you! 🎁🎄
https://t.co/PJORrokctI

#Hackvent2023 #Day1CTF

[SEC Consult @sec_consult]

He did it again... @timolongin shows you how to poison the DNS name resolution of an entire country https://t.co/crApH7Mrgk #infosec #hackerlife

[hackaday @hackaday]

Linux Fu: Easy Kernel Debugging
https://t.co/Uh8SOICziw

[Florian Holzbauer @holzsec]

@hackaday Love it, thanks for sharing <3

[Florian Holzbauer @holzsec]

HotCRP - Submission tool for major security conferences, guess someone forgot to renew the certificate? 🙈

[Proton @ProtonPrivacy]

It looks like welcome progress has been made in the EU and existential threat to #encryption known as #ChatControl seems to be softening.

Parliamentarians have reportedly agreed to remove clauses that give law enforcement a blank check to force encrypted services like #ProtonMail to hand over user messages, emails, and files. While this is a victory for the online #privacy movement, the devil is in the details, and we look forward to seeing the official text.

It's vital the European Council aligns its position with Parliament now.

Read our full statement here: https://t.co/6XY3KomDYL

[Team Austria ECSC @TeamAustriaECSC]

It might be 🥶 in Norway, but we're coming in hot! Here's a recording from the #ECSC opening event.

1. Let's pretend we popped a calc
2. Organizers get scared
3. A/V team disconnects the beamer

🔥🔥🔥

Hyped for the first gameday of #ECSC2023 tomorrow! @openECSC @enisa_eu

[「𝗠𝗮𝗿𝗰𝗼」🐕🚶🏼 @marcodavids]

Setting up modern e-mail is hard!
https://t.co/pUkcHiFEnm

[NetBlocks @netblocks]

⚠️ Confirmed: Real-time network data show SpaceX Starlink satellite internet platform is currently experiencing an international outage; reason unknown. 🛰️📉 #StarlinkDown

[APNIC @apnic]

.@mrkaran_ shows us how to set up a home network monitoring stack built with #Telegraf, #Grafana and #RaspberryPi. Insightful post: https://t.co/i1TdQshr9G #Netops

[SBA Research - Science for better security @SBA_Research]

Want to know how to stop #Zenbleed on Windows? Have a look at how to apply the Zenbleed MSR workaround on Windows. Or how a one-liner on Linux becomes an entire PowerShell script on Windows … https://t.co/SGNUt1WOT4

[Florian Holzbauer @holzsec]

@HansVanEijsden @ProtonMail Ah neat, in this case you know that your setup already validates DNSSEC. We call this prefiltering, but we mostly saw it for web clients until now. In order to conduct the other tests, you can remove these 2 addresses from the list of To addresses. Hope this helps :)

[Florian Holzbauer @holzsec]

Test your email provider on https://t.co/fhk9kvEedc! We are still looking for the first one to score 10/10 - While waiting for your result, have a look at the blogpost!
My setup at @ProtonMail -> Strict TLS support ✅ (! DANE < MTA-STS); IPv6 for DNS 🏗️ / 📧-delivery soon?

[APNIC @apnic]

On the blog: @holzsec on how real-world deployments keep up with increasing complexity of email delivery and security: https://t.co/uwgn00VDdk @chelloway

[Galileo @G4lile0]

⚠️A while ago I developed Heimdall-WiFi-Radar, only with 3× ESP8266 it was possible to track and position WiFis devices through walls, now with the help of AI we have a new level, it is possible to know where you are and what are you doing! 😱😱

[Sam Curry @samwcyo]

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies:

https://t.co/xCHG5oLYWK

Contributors:
@_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

[daniel:// stenberg:// @bagder]

curl -w certs https://t.co/IPPr4RhacL - curl can now output the server certificates in PEM format