Konstantin Weddige / is on Nostr

Co-Founder [@lutrasecurity](https://infosec.exchange/@lutrasecurity )
Mitglied Bezirksausschuss 11, Milbertshofen - Am Hart

Web: https://weddige.eu
Work: https://lutrasecurity.com/team/
Pixelfed: https://pixelfed.de/weddige
Pronouns: he/him

Last Notes

2024-08-29 16:31:41

- reply

I don't care, I want waffleeeeees!

2024-08-29 16:16:15

Someone is making waffles and I can smell them 🤤

2024-07-01 18:05:36

- reply

Giving up on politics is handing over power to those who want to dismantle democracy. Build communities, but use them to give people hope that not all is lost and encourage them to keep fighting.
Trump may go unpunished, but that doesn't mean he will seize power, and that the Constitution can't be amended to prevent this from repeating in the future.
There is always hope until you give it up.

2024-07-01 15:18:55

- reply

but I have been thinking about writing an autoboost script, to monitor certain accounts (like my pixelfed account) and boost every post.

2024-07-01 15:17:36

- reply

I understand your concern with the traction, but isn't that thwarting the whole beauty of boosts?
With boosts we can finally get rid of all that duplicate content and don't have to worry, that the real discussion is happening on another copy of the post.
Instead of the option to cross post between pixelfed and mastodon, I would love to see a better support for boosts in pixelfed (the app doesn't support them rn).

2024-06-30 15:47:29

- reply

mine is @npub1qrq…n3hl, but I'm using it not much lately. I'm stumbling over bugs too often.

2024-06-28 18:50:06

- reply

that's the way to go! Election day should IMHO be either a public holiday or on the weekend (as it is in a lot of countries: https://en.wikipedia.org/wiki/Election_day)

2024-05-31 11:04:48

- reply

Thank you! I am very happy to hear that!

2024-05-31 10:55:00

@npub1xsv…q6he, what's the future of #reblogs in #pixelfed?
There have been some bugs and missing features, and today @npub1t5c…ppw4 closed two bug reports concerning reblogs as "not planned". Will @npub1gq5…qcul continue to support reblogs? Because without, it's kind of useless to me.

2024-05-14 13:21:50

- reply

While I agree that it's good to expect compromise of whatever technology you're using, I don't think this take is really helpful.
The assumption that everything is compromised, apart from discussing strategies for dealing with it, just takes away our ability to make informed decisions. We have limited knowledge of the capabilities of the relevant threat actors, so we have to weight the probability that a particular implementation is still secure.

2024-03-31 14:56:55

- reply

This is due to something I call #KoboldLetters. By cleverly (mis)using CSS, attackers can display completely different emails to different recipients.
The problems with HTML and CSS in emails have been known for a long time, but the security implications have usually been underestimated or actively downplayed. That's why I wrote an article explaining how HTML emails can be used to deceive recipients into becoming part of an sophisticated #phishing attack.
https://lutrasecurity.com/en/articles/kobold-letters/

2024-03-31 14:43:32

- reply

If your answer was "everything", you were right. Because the email your accountant would receive wouldn't look anything like the one you forwarded.
https://gruene.social/system/media_attachments/files/112/190/350/588/982/638/original/c6a6f76778e53cf4.png

2024-03-31 14:38:32

Welcome to another edition of "Is this phishing?"
Assume the email is in principle plausible and the transaction ID exists. What is the worst that can happen if you press send?
#phishing
https://gruene.social/system/media_attachments/files/112/190/307/228/341/182/original/b5ac7958f2438e8d.png