Since October 14th,, Microsoft has disabled previews in Windows File Explorer, for at least all downloaded files from the Internet and stored on network shares. Attackers could capture NTLM hashes simply by viewing the preview. I had to smile. It’s as if Microsoft had read my blog post “Why Every Windows AD Should Be Kept Offline” earlier this month, where I discussed exactly this kind of NTLM leakage. Read more

At the end of 2025, there will be a small highlight and educational holiday: the 39th Chaos Communication Congress (39C3) in Hamburg. From 27th to 30th December, you can find me at the CCH in Hamburg. . Looking forward, Yours, Tomas Jakobs https://events.ccc.de/congress/2025/infos/index.html ↩︎ Read more

Simple: Install Linux! Okay, that might sound too blunt, Tomas, but it’s true: The last bare-metal Windows installation in the household, my dedicated “gaming machine”, has recently been reinstalled with GNU/Linux Debian. Microsoft’s passive-aggressive Windows 10 EOL threat doesn’t work on me, or at least not in intended way. Read more

Today on public holiday (in Germany) I polished my Nautilus script collection and uploaded it to Codeberg. For everyone who enjoys automating recurring tasks such as OCR on PDFs, creating animated WebP images from a selection of pictures, or encoding videos in h.. The script collection will be updated from time to time. Read more