I know, "Amtssprache ist Deutsch!'. But how about including a QR code/ link to a translation in official documents? 🤔

This year, I finally got the time to fully participate in #Hacktoberfest. I'd love to contribute to some Python lib or other project. Maybe also NodeJS, hmmm..

Published my (incomplete) #MIPS disassembler and emulator that I wrote a while ago in #Python: github.com/chmey/mips-dis…

Small but well documented program to find basic blocks using Capstone Engine library for #Python3 github.com/chmey/bb-finder

That's interesting. Reminds me of building a modern front end to an ancient backend structure.

I'm ready to be more efficient! #vscode

Do you like crypto? Are you interested in new attack techniques? Then this is something for you: We present raccoon-attack.com a novel cryptographic vulnerability in the SPECIFICATION of TLS Credits: Marcus Brinkmann, Nimrod Aviram, juraj somorovsky, Johannes Mittmann Jörg Schwenk

Urban mobility in Rotterdam is way beyond what I'm used to from the Ruhr area. Rental bikes and electric scooters, carsharing and electric mini cars, all around the city and frequently used.

Look at this slice of awesome. The new Wireshark version in dev (3.3.0) has a packet diagram view. A fantastic teaching and learning tool! When released, I'll be making pretty extensive use of this in my classes! Great job Gerald Combs and Wireshark Foundation team.

Solche Interessen werden von Regierungsmitglieder und -innen durchgesetzt, die einer Partei zugehörig sind, die für die Mehrheit der Bevölkerung nicht wählbar ist.

#Hacktoberfest doors open! Ready to for over 30 days of coding, fixing, requesting pulls and contributing!

Wir haben gewonnen! Das Verwaltungsgericht Hamburg erklärt die #Schiffssicherheitsverordnung von #Scheuer für europarechtswidrig und damit auch die auf dieser Grundlage erfolgte Festsetzung unserer Schiffe für unwirksam. #ScheuerRücktritt #ForRefugees

Here's a local Python3 API for resolving IPs to ASN data. Useful for pentesting and threat analysis! github.com/chmey/py-iptoa…

I've written a post about using dnsrecon during the recon phase of a pentest. After scanning, a report parsing tool automatically groups the results by record type and queries an IP2ASN resolver. chmey.com/automating-dom…

Great opportunity to work with modern tech and smart people! Thank you! 🚀

BountyCon EDU in Madrid is a go 🥳 Facebook Security #bountyconedu

You can force any v8/Electron process to execute arbitrary js code (child_process, http, etc) by forcefully enabling and abusing the builtin debug mechanism ... here's VS Code executing Calc, but I suspect any Electron app is susceptible 🔥 it works with SIP enabled on macOS

That's similar to users getting tricked to paste JS into the browser console. Bookmarklets should run in isolation like file:/// or should be removed.