January 4, 2021 | 11:41

Hackback the Malware

Yesterday and today I’ve noticed the author malvuln1. He has uncovered vulnerabilities for 14 malware and backdoor applications. Yes, you are correct: He has found vulnerabilities in malware and backdoors, practically with proof-of-concepts to reproduce. No need to emphasise, that’s all Windows malware we’re talking about. There is no indication whether he contacted the respective vendors of the affected “software” prior to his full disclosure. Also missing are CVE2 reference numbers and CVSS3 Scores. Read more

October 5, 2020 | 20:00

Hacking - where are the limits?

In the previous webinar on IT risk assessment and information security, participants questioned me during the 15-minute live hacking session: Is this not illegal? We took a closer peek at the servers of an ambulant care unit and two other businesses. I found them by chance from a total of 28 million hosts1 across Germany using specific search terms. The search lasted just a few seconds and after that we browsed through the numerous directories with patient data and medical prescriptions. Read more

August 26, 2020 | 18:00

Fefe on today's programming

Felix von Leitner (Fefe) in his latest article1 at Heise wrote a very good statement straight out from the bottom of my heart: Programming is in reality more an optimisation problem (what is the least effort I have to invest to get the customer to buy this) than engineering design. Even worse: If you find a developer who does everything correctly, then he is not competitive on the market against all the short-term approaches of the botchers of the competition. Read more

August 25, 2020 | 08:00

Windows is broken by design

Feedbacks to my recently written blog “Working in Homeoffice Part I”: No Tomas, you can’t say you believe Windows is broken by design, bashing everybody up in the face. or: It’s not that simple getting privileges on windows computers. Well, how to put it right? Perhaps by explaining how easy and quickly you can become an administrator on Windows 7 or Windows 2008R2 server? Without knowledge of any login data at all? Read more

August 23, 2020 | 15:04

Working in your Homeoffice - Part I

Home Office Workstations - Introduction How to integrate a corporate home office securely? And preferably also in a cost-effective, transparent and sustainable way! Some people might have been busy on this question due to Corona lockdown. As an external contractor, I used to stand at the sideline more than once and looked into the big arena of swarm idiocy1 and stupidity2. With this picture in mind, I’m launching a new blog series describing what I think a home office workplace for small and medium-sized businesses should look like. Read more

© 2021 Tomas Jakobs - Imprint and Legal Notice