Fought with UBI FS and U-Boot and wrote a little documentation for it: security-bits.de/research/refer…

A little bit of inspiration for not killing yourself while working with electronics. security-bits.de/posts/2024-09-…

The first ever end-to-end cross-process Spectre exploit? I worked on this during an internship with grsecurity! An in-depth write-up here: grsecurity.net/cross_process_…

A while ago I've given a talk on how to build exceptional security research teams: github.com/rrbranco/Prese… - I continue convinced that is all that is needed. The adage "Great people leave managers, not companies" continues to be true.

Is the Leidenfrost effect a bug or a feature? ;)

No matter what tools I have available, when looking into binary patterns, the text editor always wins

Preparing for H2HC security-bits.de/hackerid/

I'll be bringing a card printer and CR80 (85.6mm x 54mm) cards to H2HC. Full Duplex, 600DPI. Should you need anything printed (1..5..20 cards), drop me a message, just want to make sure I have enough ink on me

Honestly not sure whether it's a bad sign when the driver puts on his seat belt after the first half of the trip

Printing cards and IDs during H2HC more details here: security-bits.de/posts/2024-12-…

Nearly there. Just one more "night" until H2HC

Overkill home network? How I got there and why :) security-bits.de/posts/2025-01-…

!!!

Seems I have a functioning OLT

viXra material; we told you to stop using RSA years ago

Does anyone have a nice contact Google Maps ? I would like to understand how I can place a complaint concerning a company cleaning their ratings. I've had 5 complaints against my comment. Google accepts my objection, and then a few days later the same complaint comes again ...

Analysed a bunch of firmware utilizing BINARLY🔬 and got a long list of issues, even longer than expected. But how significant is a long list? Shouldn't the question be: How well is the device maintained? A few thoughts on the topic! security-bits.de/posts/2025-06-…

Colour coding for the colour blind

Ever had your FortiVPN Client offering you an incorrect eMail address during SSO? Maybe even a russian one? I might very well just have been a bug in the WebView ... security-bits.de/posts/2025-10-…

Needing a deeper insight into the EU AI act and the classification as an AI system, I wrote a few notes... Sadly a lot of buzzwords. Does a ChatBot "talking" to me influence any environments? I'd say no, as its me doing the influencing, but.. Any thoughts? security-bits.de/posts/2025-10-…