Security Researcher, Hacker. Breaking new stuff, voiding warranties and finding out how things work!
Joined March 2013
- Tweets 2,552
- Following 381
- Followers 1,535
- Likes 670
539 Photos and videos
May 11
Time to go Vibe-*Drinking?
Probably! AI is taking over more and more tasks, in partially replacing humans, partially augmenting them. Sometimes we have a form of Human Washing, where a real person just hides the fact something is solely running on AI...
security-bits.de/posts/2026-…
85
Mar 23
A few short notes on why
"Products [...] placed on the market before 11 December 2027 shall be subject to [...] this Regulation only if, from that date, those products are subject to a substantial modification."
might give a false sense of safety. :)
security-bits.de/posts/2026-…
50
Brian retweeted
Mar 7
Vulhunt is now open-source, this is a game changer: github.com/vulhunt-re/vulhun… @binarly_io @vulhuntdev
7
143
636
43,947
Mar 8
Got some post yesterday, Binary Risk Assessment as defined on binary.protect.io/ as a card game. According to the underlying git I've been thinking about this since 2024 :-/ .
Few changes, then reprint, then ready to share! :)
1
7
297
30 Oct 2025
Performing Red Teaming? Require Physical access or working on a Social Engineering gig? Need a matching company ID card? Then let's talk and print one :)
security-bits.de/posts/2025-…
1
72
19 Oct 2025
Needing a deeper insight into the EU AI act and the classification as an AI system, I wrote a few notes...
Sadly a lot of buzzwords.
Does a ChatBot "talking" to me influence any environments? I'd say no, as its me doing the influencing, but..
Any thoughts?
security-bits.de/posts/2025-…
1
79
10 Oct 2025
Ever had your FortiVPN Client offering you an incorrect eMail address during SSO? Maybe even a russian one?
I might very well just have been a bug in the WebView ...
security-bits.de/posts/2025-…
2
167
16 Jun 2025
Analysed a bunch of firmware utilizing @binarly_io and got a long list of issues, even longer than expected. But how significant is a long list? Shouldn't the question be: How well is the device maintained?
A few thoughts on the topic!
security-bits.de/posts/2025-…
2
8
14
4,446
25 May 2025
Does anyone have a nice contact @googlemaps ? I would like to understand how I can place a complaint concerning a company cleaning their ratings. I've had 5 complaints against my comment. Google accepts my objection, and then a few days later the same complaint comes again ...
184
Brian retweeted
9 Mar 2025
viXra material; we told you to stop using RSA years ago
85
298
2,937
353,165
13 Dec 2024
Printing cards and IDs during @h2hconference more details here:
security-bits.de/posts/2024-…
6
11
1,277
12 Dec 2024
Honestly not sure whether it's a bad sign when the driver puts on his seat belt after the first half of the trip
149
4 Dec 2024
I'll be bringing a card printer and CR80 (85.6mm x 54mm) cards to @h2hconference. Full Duplex, 600DPI.
Should you need anything printed (1..5..20 cards), drop me a message, just want to make sure I have enough ink on me
2
6
15
2,123
12 Nov 2024
No matter what tools I have available, when looking into binary patterns, the text editor always wins
190