blog.hboeck.de 5. 2. 2024How to create a Secure, Random Password with JavaScript – blog.hboeck.de 27. 11. 2023A Newsletter about Climate Change and Industrial Decarbonization – blog.hboeck.de 21. 2. 2021Please do not put IP addresses into DNS MX records – blog.hboeck.de 21. 10. 2020File Exfiltration via Libreoffice in BigBlueButton and JODConverter – blog.hboeck.de 13. 4. 2020Generating CRIME safe CSRF Tokens – blog.hboeck.de 6. 4. 2020Userdir URLs like https://example.org/~username/ are dangerous – blog.hboeck.de 16. 12. 2019#include – blog.hboeck.de 13. 9. 2019Security Issues with PGP Signatures and Linux Package Management – blog.hboeck.de 12. 11. 2018How my personal Bug Bounty Program turned into a Free Security Audit for the Serendipity Blog – blog.hboeck.de 27. 6. 2018Efail: HTML Mails have no Security Concept and are to blame – blog.hboeck.de 22. 5. 2018efail: Outdated Crypto Standards are to blame – blog.hboeck.de 11. 4. 2018Introducing Snallygaster - a Tool to Scan for Secrets on Web Servers – blog.hboeck.de 16. 11. 2017Some minor Security Quirks in Firefox – blog.hboeck.de 7. 9. 2017In Search of a Secure Time Source – blog.hboeck.de 5. 9. 2017Abandoned Domain Takeover as a Web Security Risk – blog.hboeck.de 20. 7. 2017How I tricked Symantec with a Fake Private Key – blog.hboeck.de 15. 6. 2017Don't leave Coredumps on Web Servers – blog.hboeck.de 19. 5. 2017The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken – blog.hboeck.de 19. 4. 2017Passwords in the Bug Reports (Owncloud/Nextcloud) – blog.hboeck.de 8. 4. 2017And then I saw the Password in the Stack Trace – blog.hboeck.de 15. 3. 2017Zero Days and Cargo Cult Science – blog.hboeck.de 15. 7. 2016Insecure updates in Joomla before 3.6 – blog.hboeck.de 4. 4. 2016Pwncloud – bad crypto in the Owncloud encryption module – blog.hboeck.de
5. 2. 2024How to create a Secure, Random Password with JavaScript – blog.hboeck.de 27. 11. 2023A Newsletter about Climate Change and Industrial Decarbonization – blog.hboeck.de 21. 2. 2021Please do not put IP addresses into DNS MX records – blog.hboeck.de 21. 10. 2020File Exfiltration via Libreoffice in BigBlueButton and JODConverter – blog.hboeck.de 13. 4. 2020Generating CRIME safe CSRF Tokens – blog.hboeck.de 6. 4. 2020Userdir URLs like https://example.org/~username/ are dangerous – blog.hboeck.de 16. 12. 2019#include – blog.hboeck.de 13. 9. 2019Security Issues with PGP Signatures and Linux Package Management – blog.hboeck.de 12. 11. 2018How my personal Bug Bounty Program turned into a Free Security Audit for the Serendipity Blog – blog.hboeck.de 27. 6. 2018Efail: HTML Mails have no Security Concept and are to blame – blog.hboeck.de 22. 5. 2018efail: Outdated Crypto Standards are to blame – blog.hboeck.de 11. 4. 2018Introducing Snallygaster - a Tool to Scan for Secrets on Web Servers – blog.hboeck.de 16. 11. 2017Some minor Security Quirks in Firefox – blog.hboeck.de 7. 9. 2017In Search of a Secure Time Source – blog.hboeck.de 5. 9. 2017Abandoned Domain Takeover as a Web Security Risk – blog.hboeck.de 20. 7. 2017How I tricked Symantec with a Fake Private Key – blog.hboeck.de 15. 6. 2017Don't leave Coredumps on Web Servers – blog.hboeck.de 19. 5. 2017The Problem with OCSP Stapling and Must Staple and why Certificate Revocation is still broken – blog.hboeck.de 19. 4. 2017Passwords in the Bug Reports (Owncloud/Nextcloud) – blog.hboeck.de 8. 4. 2017And then I saw the Password in the Stack Trace – blog.hboeck.de 15. 3. 2017Zero Days and Cargo Cult Science – blog.hboeck.de 15. 7. 2016Insecure updates in Joomla before 3.6 – blog.hboeck.de 4. 4. 2016Pwncloud – bad crypto in the Owncloud encryption module – blog.hboeck.de