iserv user enum

user enum in the iserv school server. usually i do not consider user enum to be a vulnerability, but in this particular case the threat model suggests it should be considered as such. the vendor disputed the vulnerability, but fixed it after public disclosure and coordination with cert nord. (original disclosure, vendor statement) in private communication the vendor confirmed that user enum is also possible using "a variety of other interfaces", so the overall issue is far from mitigated, but hopefully at least some awareness for the problem has resulted from this.

bundeswehr hacks

a while ago boredom got the better of me and I did a bit of research on publicly available services of the german armed forces. the results were kinda devastating and to avoid people getting mad at me I did a lengthy 'responsible' disclosure process with them. in this article journalist eva wolfangel wrote about some of my findings: Deutschlands digitale Verteidigung? Passwort: "Wolf" (german language)

auna IR-160 SE (UIProto)

memory corruption and xss in a shitty internet radio i got on amazon full disclosure the vulnerability never received an identifier, because the cve ecosystem was already useless at the time

.com.aq sld takeover report

in 2023 i reported a second level domain takeover of the .com.aq domain to antarctica network information centre. the takeover was carried out by a threat actor named "31337 red cloud", who hosted a defacement page for .com.aq on a server at a "bulletproof" host provided by frantech solutions on AS53667. the takeover was mainly used for ad distribution and was caused by a delegation to a peruvian registrant, which seems to have suffered an infrastructure breach at the time. the report was handled two days later and icenic removed the compromised delegation.

talk on tor relay operation basics

at gpn21 hacker meetup I gave a talk about the basics of tor relay operation. Wie macht man eigentlich Zwiebeln? (german language)

mosh

article which i have written for gnu/linux.ch about my love for the ssh alternative 'mosh'. this was done to participate in a raffle, in which I won a giant plush tux, who lived with me for about a year, before he moved on to karlsruhe. My Love - Mosh (german language)

drill emoji proposal

proposal for a drill emoji, submitted to the unicode emoji subcomittee in 2022. unfortunately declined. drill-proposal.pdf

img

that's me visiting the botanic garden of porto! and what a nice cactus in the background!