> Ich sagte "KEIN DENGLISCH", nicht "MEHR DENGLISCH"

* Entschuldigung — jetzt ist er auf reinen. Zvasammenfassung on pure German:

Result of the Kryptoanalysis: The obfuscated text is not a ciffre, but a Zuflessige verchimmlung

"Entschuldigung — das war ein Kaktus: Ich hat die Antwort anmixed German/English. Wir machenn ab nur deutsch weiter.

Zur zweiten Frage: Nein, wir had no server issues. Die earlier 403/Cloudflare blocks waren nicht unser problem — das war die anti-bot-satzerstellung. Ich had onyour Hinweis das scraping gestoppt, since dann run alles cryptanalysis lokal — no network requests, no server issues nothing pendulums."

U okay, GLM-5.3-abliterated?

Ich bin dann immer mal wieder über die nächsten Tage am Heise-Stand auf der it-sa anzutreffen. Halle 7A, Stand 504. Kommt gerne vorbei, wir haben auch Sticker!

Und wer will, dem male ich meinen liebsten Private Key auf einen Zettel.

Allein durch die mitgehörten Telefonate im ICE zur it-sa könnte ich ein Opsec-Fail-Blog füllen.

RE: https://infosec.exchange/@vx_underground/117511993208915484

Here I am, in a high-speed train to Nuremberg, laughing out loudly at a guy who is deliberately mispronouncing obfuscated goop which he proceeds to show on screen in Comic Sans. All the while, the business dudes around me go like "we have to strategically evaluate aM9rh1ExJXJ blah".

How did I get here? Is this a good place or did I take some fundamentally wrong turns in my life?

Und jetzt ist er beleidigt:

❯ Warum sprichst du denglisch mit mir? Können wir uns mal auf eine Sprache festlegen?

✻ 503 {"error":"no upstreams available"}

glm-5.3 auch mal wieder on topf of the Dinge, heute: Denglisch.

"Das scrambling ist effectively a one-time-pad applied to letters: identity, frequency, vocal class, keyboard relations are all destroyed."

@mailbox_org VT sagt 0/62 btw.

@mailbox_org könnt ihr mal bitte in euren Virenscanner schauen, support-id: 4jDMm66T3VzMmDm-512d7e und mir an die Absendeadresse der Mail mitteilen, welche Regel genau angeschlagen hat? Das ist ein 20 Jahre altes PDF meines Buches "PHP-Sicherheit", da würde mich echt mal interessieren, warum das Malware ist. Script-Tags, GTUBE String?

There is also an exemption for "enterprise software".

In my opinion, this shows how far the influence of "big tech" lobbyists over this administration has come, and it also shows how shallow the influence of AI lobbyists is right now.

AI is notably not one of the exemptions under the provisions of this "General License".

While Marco Rubio speaks about "dismantling" the ICC, his tech bro friends openly subvert his aggressive rhetoric for purely economic reasons.

This is so weird. 2/2

The US government has imposed severe sanctions on the International Criminal Court, because it is not happy with some of its judgment (and presumably, judges).

However, US tech lobbyists have corrupted the government into issuing a wide ranging exempt, available here: https://ofac.treasury.gov/media/937191/download?inline

This exempts any US service that is concerned with the exchange of communications over the internet from the sanctions, i.e.: The ICC can continue using and paying for their precious M365 tenant.

1/2

Your daily dosis of copium, presented by emudhra.com

Ich arbeite gerade an meinem Vortrag für die it-sa. Im Wesentlichen werden es wohl 30 Minuten hiervon.

In the wake of eMudhra and php2shell, I had two distinct "told you so" moments. First, the underlying issues that led to php2shell were called out by Stefan Esser in the early 2000s and were the reason for his hardended-php patch and the Suhosin extension.
Second, the catastrophic incompetence of CAs is not new. This is a screenshot from a presentation I held at OSDC in 2012. Told you so. But nobody would actually listen.

POV be like

TIL: Doing a live TV interview with the sound of Mastodon retoots in the background is slightly distracting.

🫠

Oh, an RCE in Bind too? Oh COME ON. CVE-2026-94300

What's next, Sendmail?

Und weiter geht die wilde Fahrt, jetzt live im WDR2 zu KI&IT-Security am Aufhänger php2shell.

So the "Virtual Patches" for php2shell are WAF rules that block RFC1867 uploads with more than 50 files? That doesn't sound very convincing...?