Elektrine lite

← Feed

Felix Dreissig

F30@chaos.social

<p>Computer scientist at the intersection of software development, IT operations, and security.</p><p>Currently: Information security at codecentric (but views my own etc.), CTF infra for FAUST CTF, event orga at <span class="h-card" translate="no"><a href="https://chaos.social/@c3speakersdesk" class="u-url mention">@<span>c3speakersdesk</span></a></span>, hiking and skiing in the mountains.</p><p>Previously: DevSecOps for noris network, student at <span class="h-card" translate="no"><a href="https://mastodon.social/@FAU" class="u-url mention">@<span>FAU</span></a></span>, CTF player with FAUST.</p>

Posts

  • View post

    CVE-2026-18963: #Keycloak arbitrary account takeover via session confusion using simple HTTP requests. 😱 Nice find and (allegedly) not even AI-powered at its core. A working exploit is publicly available. Given Keycloak&amp;#39;s widespread use in critical auth systems, this appears to be flying a bit under the radar so far. If you run Keycloak, it needs your attention *now*. https://github.com/Red-Darkin/CVE-2026-18963-keycloak

  • View post

    OH: &amp;quot;Mein Vater hat mich geshamet weil ich Syntax Highlighting hab.&amp;quot;

  • View post

    Hello #ice602, my old Friend

  • View post

    Irgendwer ne Ahnung, wohin dieser Flug geht? Hier fehlen eindeutig ein paar Schilder. #fra

  • View post

    Bonjour la Méditerranée! #arschlauber

  • View post

    OH: Was ist das grade, gewaltfreie Meuterei?!

  • View post

    OH: Hat schon jemand einen Salatkopf vor eine Webcam gestellt?

  • View post

    Karlsruhe ohne GPN-Publikum auch irgendwie ungewohnt

  • View post

    1. Tell everybody that your API keys aren‘t secret and it’s safe to publish them on your website. 2. Protect sensitive AI assistant content with the same kind of API keys. 3. Retroactively allow active API keys to access the sensitive content. 4. What could possibly be going wrong?! 🔥 Probably the worst vulnerability Google has ever deployed to prod: https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules

  • View post

    Schei?encoding fährt heute mit im Bus 420 (Die Ort heißen Völs und Kühtai) #oeffitour