Wednesday afternoon is designated for live-events on topics, software and technologies on my bucketlist, but not yet taken. So why not fire up screen-recording and make this an established part of this blog? Everything live and with the potential for being pin-tailed like a donkey when something’s going south? Event finished, join the next one on upcoming Wednesday! Read more

Many PoCs appear as textfiles with references to company websites or blogs. Reverse engineer Axel Souchet publishes his PoCs in a way I find more convenient and much better: As a git repository. Here his latest release on CVE-2021-28476 from a few hours ago, how via RCE a guest can breakout of a HyperV environment. The further course of a publication is not less exciting, if to be learned and …Read more

Wednesday afternoon is designated for live-events on topics, software and technologies on my bucketlist, but not yet taken. So why not fire up screen-recording and make this an established part of this blog? Everything live and with the potential for being pin-tailed like a donkey when something’s going south? Event finished, join the next one on upcoming Wednesday! You are welcome! Read more

I finished the weekends’ flow with the integration of a live streaming menuitem. Not expecting to have an insane huge audience with this blog, I dare to hold small but maybe interesting live sessions at irregular intervals. These might include installation evenings with unknown software, hacking sessions in programming projects without NDA. Definitely some gaming or flight simulator sessions …Read more

Friday afternoon, a long bank holiday weekend lies straight ahead. Time to fix a few issues in this blog. Basically just minor ones and for the most visitors irrelevant. But for me important details, making the difference to the standard modular websites. Yellow Textmarker One of these inconspicuous details is the highlighting with a “yellow textmarker”. I have been annoyed more than …Read more

Benjamin Delpy did it again. This time his attention was focused on the aged SCCM. Once developed in the late 90s, it looks back on a turbulent history with some twists and turns. Unfortunately the security behind it looks exactly the same what you would expect and at best can be considered as “rotten” when still using 3DES to communicate with clients. The video of a current Windows …Read more

The last two days I improved my own architecture and extended everything with a PDF workflow. If you like, you may download my larger blog series from the previous year in one piece as a PDF file and read them offline, a total of 75+ pages of condensed facts: Corona Warning App Home Office Workplaces Macbook Revival Come on, PDFs for old articles? Seriously? Well these are just test-balloons and …Read more

The foundation of every ISMS is a “living” inventory. In an ideal world, this communicates with the Ansible, Bash or PowerShell scripts within IT Operations. Snipe-IT, which I value and have successfully used for many years, was unknown to c’t up until now. Enjoy the read (in German): “IT-Assets im Griff” in der c’t Ausgabe 7/2021. Read more

Everybody with an Internet-faced Microsoft Exchange server, Outlook Web Access (OWA) or Exchange Active Sync (EAS) can consider his or her system as compromised since January. This is reported by security experts like Chris Krebs and news magazines like Golem or Heise. In Germany, the BSI has contacted more than 9,000 companies. The scope of the current security vulnerabilities are comparable to …Read more

Yesterday evening I rolled out the new update on my Nextcloud 21 instance. In the coming days, functional tests and adjustments will follow on the scripts for rolling out on customers’ systems Looking with interest on my Prometheus monitoring, how far the performance improvements affect actual implementation. That’s not usually worth an extra microblog. My point is, that I …Read more