ju @ju916

just ju — find me on @[email protected] heise.de/security/ Hannover, Germany Joined August 2008

Tweets

4K
Followers

868
Following

342
Likes

2K

ju @ju916

2 weeks ago

@nextronresearch Isn't that picture wrong? AFAIK the attackers hijacked the route *to* the Virtualizor server (i.e. Update server). NOT the route to the VPS - like in your pic. CC @cyb3rops

0 0 0 39 0

View Details

@signalapp @matthew_d_green @Cloudflare Great feature. But why did you choose 3 verifiers that are all based in the US and therefore bound to US law? Isn’t that ignoring the single most likely threat actor for who could force signal to deliver non authorised keys? imho that’s a bad signal you are sending there.

0 0 1 182 0

View Details

ju @ju916

a month ago

Do you have an opinion on that @matthew_d_green ? Am I overreacting?

0 0 0 31 0

View Details

ju @ju916

a month ago

signal.org/blog/automatic…

1 0 1 48 0

View Details

ju @ju916

a month ago

I really love the concept of Automatic Key Verification in @signalapp But how can you implement that with all 3 verifiers sitting in the US and bound to US law? That‘s a very bad signal. @mer__edith care to comment?

1 1 1 140 0

View Details

ju @ju916

a month ago

@robertgraham The real question is: what’s your metric for measuring „positive outcome“? If it’s something along the line of „happiness“ I do agree that honesty and integrity add a lot to that. If it‘s pure wealth - probably not so much.

0 0 0 8 0

View Details

ju @ju916

2 months ago

@HeidyKhlaaf Where can I find a documentation of this attack and the poisoned source code?

1 0 0 89 0

View Details

ju @ju916

3 months ago

@M_haggis Great article, thanks for that. I'm researching the subject to write about it, and I'd like to clarify some things. Could you pls contact me? mail is: ju at heise dot de

0 0 1 225 0

View Details

ju @ju916

3 months ago

@cyb3rops things only got better after enforcing rules like "don't guess", "check for exact version matches" and "always X-check the official documentation". But still I find myself cursing a lot

0 0 0 27 0

View Details

ju @ju916

3 months ago

@cyb3rops In my experience solving "product related problems" like "how do I ..." with AI sucks hard. In 9 out of 10 cases the first answer does not work; in more cases than not you'll find at the end, that you invested more time compared to doing the research on your own.

1 0 0 55 0

View Details

ju @ju916

3 months ago

@arekfurt Interesting graph. But is it based on any underlying hard data or is it mainly an illustration of your gut feeling? Without that info it looks like you're just telling us what everyone knows (attackers go for maximum reward/effort) with some nice colors ...

1 0 0 19 0

View Details

ju @ju916

3 months ago

@vxunderground This is from 2017 - right?

0 0 0 53 0

View Details

ju @ju916

4 months ago

@halvarflake @thegrugq don’t get me wrong, still not panicking, but the comparison lacks some stability

1 0 0 45 0

View Details

ju @ju916

4 months ago

@halvarflake @thegrugq but there wasn’t an industrialized cybercrime underground making billions of that then.

1 0 0 88 0

View Details

ju @ju916

5 months ago

@jedisct1 your link target shifted to their next big story. Permanent link: flyingpenguin.com/the-boy-that-c…

1 1 2 722 2

View Details

ju @ju916

6 months ago

@_markel___ @janmuenther Could you elaborate on the relevance of this for current, still supported SGX platforms - if any? Thanks in advance

0 0 0 922 0

View Details

ju @ju916

6 months ago

@bwesterb @grok explain to me, how that ZKP works and what it really proves and what not.

1 0 0 520 0

View Details

ju @ju916

7 months ago

that‘s exactly how I remember him. RIP FX

Daniel Cuthbert @dcuthbert

7 months ago

Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed RIP my friend and thank you