Svante Schubert

[Paul Moore - Security Consultant  @Paul_Reviews]

Hacking the #EU #AgeVerification app in under 2 minutes.

During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.

1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.

So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.

After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.

Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.

Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.

[Mike Lewis @ml_perception]

New paper in Science today on playing the classic negotiation game "Diplomacy" at a human level, by connecting language models with strategic reasoning! Our agent engages in intense and lengthy dialogues to persuade other players to follow its plans. This was really hard! 1/5

[Svante Schubert @svanteschubert]

@apelekies & ich werden morgen je ein Webinar für die @ZUGFeRD community geben, s. https://t.co/0IRDiHNa4E #erechnung #xrechnung #einvoicing

[Svante Schubert @svanteschubert]

We finally did two ODF Toolkit releases in a row: https://t.co/q2aM9YsSKG Feels like x-mas! :-)

[Svante Schubert @svanteschubert]

@_MG_ Impressive work with Razor! Aside: What was the song you played in the video? Can't find it with Shazam?

[Svante Schubert @svanteschubert]

The ODF TC recently updated our charter (guaranteeing releases - heartbeat), has four editors, two chairs and started some GitHub repo for release automation! I see into a bright ODF future! ☀️ #ODF13 (part 2/2)

[Svante Schubert @svanteschubert]

As current OASIS ODF co-chair, it is my very pleasure to announce the ODF 1.3 release after 9 years! #ODF13 🙌(part 1/2)

[Svante Schubert @svanteschubert]

@fred_blachetta @rafbuff @cio_bund @CIONRW Good progress: https://t.co/tFJLrY7x5i
On the other hand, there seems to be still some misunderstanding in some basic concepts of open-source:"In späteren Ausbaustufen soll die Open Source-Plattform – soweit möglich – auch Akteuren der Öffentlichkeit zugänglich gemacht werden"🤔

[Svante Schubert @svanteschubert]

Twittert für die Vögel! Nach der Tegel-Schließung bedrohen Bauprojekte die Naturoase neben dem Rollfeld: https://t.co/q7X7BLUOWM

[Svante Schubert @svanteschubert]

@xmlprague @jirkakosek Shared on XML++ based on my experience with XML in the past twenty years. Enjoy being here, will return ✌️

[Gijs Hillenius @Sjig]

TIL: Platzhirsche

Germany's CDU: public money, public code, and also ask for a public repository to openly share components

[Gijs Hillenius @Sjig]

Zero cost for software licences breaks UK procurement spreadsheets

https://t.co/82rR6ObzPT | OSOR

[Svante Schubert @svanteschubert]

Interesting, I am curious about a prototype of such an open federated system!👍

[The GovTech Summit @SommetGovTech]

“Banks cannot disrupt themselves, they needed startups to invent #FinTech. It will be the same with government. We need open federated systems to bring innovation to public services” - @rafbuff from @openxchange at #GovTechSummit

[Svante Schubert @svanteschubert]

Time to get rid of the shackle of (electronic) paper for standard & research papers. Transportation of innovation requires new views & tools. A good start: https://t.co/JUDowSSLRe @Joinup_eu @worrydream

[Svante Schubert @svanteschubert]

Audience quote: "Often OpenSource developers can hardly make a living, while companies do not know how to spend money on opensource." #OpenSourcePoweringDigitalEurope @Joinup_eu

[Svante Schubert @svanteschubert]

Scary Google picture translation at a lonely path in the woods close to Kyoto, Japan..

[Svante Schubert @svanteschubert]

@jdeisenberg I am reminded of a song called María from Ricky Martin, which fits to this commercial, not alone by being cheesy 😁

[Svante Schubert @svanteschubert]

Preisrätsel: Was ist kostengünstig, hat eine Reichweite von 65km, fliegt fast lautlos 130km/h und zerstört sich mit 3kg bei Aufprall?
https://t.co/xJJG9Yy8e3 https://t.co/9aaT4q5yUd

[Svante Schubert @svanteschubert]

@quasimondo This might be interesting to you: https://t.co/PbdNHFxOc6 and https://t.co/puFPzPzcN7 (Achtung: 1 Deadline tomorrow, the other March 11th))

[Svante Schubert @svanteschubert]

@EilersBernd Yes, syntax of the data is irrelevant. We agree (in general) what can be added to an office document (e.g. text, paragraphs, tables, images and their formatting). Still we have not defined user changes on these semantic entities across office applications to enable collaboration!

[Svante Schubert @svanteschubert]

Perhaps in the end, there will be #interoperability for #office #collaboration! https://t.co/nlX3ZADQT4 🥰