Facepalm of the day:
A ticket re-opened because the requestor clicked "Like" in his MUA (Outlook).
ISP veteran.
Built up CERT.at.
National and international CSIRT liaison for CERT.at
Private Blog is here: https://lendl.priv.at
Facepalm of the day:
A ticket re-opened because the requestor clicked "Like" in his MUA (Outlook).
The "temperature" parameter for LLMs could also be called "drunkenness" (or more posh: "inebriation level").
As half of the talks here at the security conference in Linz mention digital sovereignty, I just had to make this meme:
Two weeks of the CRA-SRP. Here are my notes: https://www.cert.at/en/blog/2026/9/cra-reporting-the-first-two-weeks
Is it a bad sign if you're tempted to post https://www.youtube.com/watch?v=LFrdqQZ8FFc in the chat window of an online meeting?
Asking for a friend :-)
https://ifloz.substack.com/p/carney-just-threatened-to-send-america
Well said. Brussels, take note. @EUCommission@ec.social-network.europa.eu
https://signal.org/blog/automatic-key-verification/
Yet another take on the long running problem of how to detect malicious changes in public identifier->public-key directories.
With this, Signal is closing down one way they could have been forced to cooperate in a state-run interception regime.
Ich will einfach nur mal anmerken, dass ich dem aktuellen Trend zu Schnauzbärten absolut nichts abgewinnen kann.
When will the rest of the world understand that
"Iran analysts, some of whom are in touch with regime officials, tell me that Tehran appears to believe that Trump isn’t interested in a serious peace pact and can’t be trusted to uphold one anyway." (From https://www.politico.com/news/magazine/2026/08/12/the-us-forgot-the-lessons-of-iraq-now-its-desperate-for-ideas-on-iran-01033217)
applies to all negotiations (including trade deals) with the US under Trump?
Trying to buy a renfe train ticket in Barreda:
The first machine seems to be a tele-presence application where you get a life video stream from some clerk: miserable audio and video quality. All we understood was to use another machine. Well, that one showed this error message:
Worth reading: https://craigunger.substack.com/p/nothing-moves-the-needle
We're not quite at that level in Austria, but the shared reality is under heavy pressure here as well.
This tracks with my views. AI is starting to get dangerous.
https://www.planned-obsolescence.org/p/the-hugging-face-attack-surprised?open=false
Rap sheet for AI models and labs: https://www.felonybench.com/
I'm wondering when we'll see the first court case that will determine the legal responsibility for such events.
https://www.bbc.com/news/articles/clyqpx6xk69o
Let's see if US courts do what the EU has been too timid to do.
Worth reading: https://blog.cryptographyengineering.com/2026/08/14/everything-is-about-to-go-dark/
Will LLMs kill the targeted exploitation market and thus make the "going dark" issue pressing again?
One of the premises of the CRA is the fact that you can share info on the existence of a vulnerability + mitigation measures without helping a potential attacker.
In the age of AI, that might not be true any more if https://anil.recoil.org/notes/rumour-is-the-exploit is to be believed.
This is not social media junk food, but real, sustaining food for thought:
https://youtube.com/playlist?list=PLPNSuH4X6has
(Timothy Snyder: Hitler and Stalin Today)
The report from CERT.PL covering the attacks on the Polish energy system is finally available:
https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/
I'm not sure I fully agree with the premise of this paper, but the historical review of the LE vs. Encryption debate is really helpful:
Is it already time to start calling Trump the American Führer?
Or should we wait until he decides to order more explicit war-crimes?
Triggered by reading my slides from last year:
What happened with the minerals deal that Trump so desperately wanted from Ukraine last year?
“The point is that we are all capable of believing things which we know to be untrue, and then, when we are finally proved wrong, impudently twisting the facts so as to show that we were right. Intellectually, it is possible to carry on this process for an indefinite time: the only check on it is that sooner or later a false belief bumps up against solid reality, usually on a battlefield.”
― George Orwell
Ich trage am Dienstag in Salzburg zum Thema "Lawful Access to encrypted data" vor.
A lot of what the author writes also applies to me. I really should do more puzzles.
https://www.theguardian.com/lifeandstyle/2026/apr/13/world-noise-jigsaw-puzzling-helped-calm-mind
How the Australians turned a duck into a platypus:
I just read https://philpapers.org/rec/LERTAF
I have a really hard time reading philosophical reasoning. Nevertheless, for me, there are a number of red flags in the text. I cannot support the conclusion of the author.
What do you all think?