information security & privacy
TL;DR I discovered an unclaimed AWS S3 bucket, which was still actively used to load JavaScript across multiple domains belonging to a major Brazilian media group, GJC Corp. This JavaScript was included even on their Keycloak-based authentication portals. If an attacker had taken over the bucket and served
In case you are having problems to configure Roundcube to send mail, please note the following: If you are connecting on port 587 you should probably use tls://mail.mydomain.org instead of ssl://mail.mydomain.org because (by default) STARTTLS is used on port 587. In case you are
European directive NIS2 will have implications on software companies. One of these aspects is the use of SBOM's to help identify security issues.
By combining Format-transforming encryption and the Source A2s protocol we explore the possibilities to circumvent censorship by using a different protocol.
Note: attempting to run this from now on might result (eventually) in a ban of your phone number used in the PoC of using WhatsApp. The code has not been updated for over a month now, which results in easier detection by WhatsApp. In February 2015 I released the Proof
Publish date: 28-Feb-2016 Prior knowledge required: Technical understanding of Tor Article in PDF Format: https://maikel.pro/published/progress-tor-pluggable-transports.pdf Direct link to article in PDF format. 1. Internet Censorship Internet Censorship comes in many forms: black listing websites, whitelisting websites, physically shutting it down,
Not so long ago Squat was announced, an integrated full text search engine within Dovecot with basically no additional software required. This makes the use of FTS much easier within dovecot. But, there is something that cannot be found elsewhere on the internet. That is the fact that by default
Publish date: 15-Jan-2016 Prior knowledge required: Abstract understanding of PKI. Article in PDF Format: https://maikel.pro/published/crls-ocsp-stapling.pdf Direct link to article in PDF format. OCSP and its PKI aspects Public Key Infrastructure is crucial in today’s use of the internet. PKI
So you have setup your own mailserver with Dovecot and Postfix and it's working fine (DKIM, SPF etc), except for sending mails to Hotmail and Gmail. The problem: Sending mail to Hotmail/Gmail Guess what, you are not the exception, many people with self small hosted mailservers complain
This is my collection of remarkable/funny ways of dead people lying around in TF2 public servers. I will keep updating this post for more funny death scenes :D. Unique death poses Dramatic death spy That one second too late sprint death Keep hangin' in there mate death Nailing
Downloading Media and fooling around It all started with 1 Raspberry Pi model B as an alternative to a server in the basement. There is no room in the basement for an server, and I don't like running fans/HDD's in my bedroom (because of the
The exact privacy problem described which WhatsApp did not fix. This allows a random person to track anyone on WhatsApp.
WhatsApp has a serious privacy problem which the WhatsSpy Public tries to let people understand. It seems WhatsApp is not willing to fix this.
MEME staat voor Minimum Effort, Maximum Efficiency. Dit ontwikkelmodel gaat uit van de volgende principes.
The old setup In februari I posted some information about my Raspberry Pi as an Media Service (downloading and streaming). This setup is visible in the following image: An Conceptric USB 2.0 HUB was powering the external HDD and two Raspberry Pi's. The RPi on the left