Otmar Lendl
otmar@infosec.exchange
<p>ISP veteran. <br />Built up CERT.at.<br />National and international CSIRT liaison for CERT.at</p><p>Private Blog is here: <a href="https://lendl.priv.at" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">lendl.priv.at</span><span class="invisible"></span></a></p>
Posts
-
View post
Worth reading: https://craigunger.substack.com/p/nothing-moves-the-needle We&#39;re not quite at that level in Austria, but the shared reality is under heavy pressure here as well.
-
View post
https://signal.org/blog/automatic-key-verification/ Yet another take on the long running problem of how to detect malicious changes in public identifier-&gt;public-key directories. With this, Signal is closing down one way they could have been forced to cooperate in a state-run interception regime.
-
View post
Trying to buy a renfe train ticket in Barreda: The first machine seems to be a tele-presence application where you get a life video stream from some clerk: miserable audio and video quality. All we understood was to use another machine. Well, that one showed this error message:
-
View post
Worth reading: https://blog.cryptographyengineering.com/2026/08/14/everything-is-about-to-go-dark/ Will LLMs kill the targeted exploitation market and thus make the &quot;going dark&quot; issue pressing again?
-
View post
When will the rest of the world understand that &quot;Iran analysts, some of whom are in touch with regime officials, tell me that Tehran appears to believe that Trump isn’t interested in a serious peace pact and can’t be trusted to uphold one anyway.&quot; (From https://www.politico.com/news/magazine/2026/08/12/the-us-forgot-the-lessons-of-iraq-now-its-desperate-for-ideas-on-iran-01033217) applies to all negotiations (including trade deals) with the US under Trump?
-
View post
https://www.bbc.com/news/articles/clyqpx6xk69o Let&#39;s see if US courts do what the EU has been too timid to do.
-
View post
Rap sheet for AI models and labs: https://www.felonybench.com/ I&#39;m wondering when we&#39;ll see the first court case that will determine the legal responsibility for such events.
-
View post
This is not social media junk food, but real, sustaining food for thought: https://youtube.com/playlist?list=PLPNSuH4X6has (Timothy Snyder: Hitler and Stalin Today)
-
View post
https://ifloz.substack.com/p/carney-just-threatened-to-send-america Well said. Brussels, take note. @EUCommission
-
View post
How the Australians turned a duck into a platypus: https://www.youtube.com/watch?v=jltRq_KlGH4
-
View post
Facepalm of the day: A ticket re-opened because the requestor clicked &quot;Like&quot; in his MUA (Outlook).
-
View post
One of the premises of the CRA is the fact that you can share info on the existence of a vulnerability + mitigation measures without helping a potential attacker. In the age of AI, that might not be true any more if https://anil.recoil.org/notes/rumour-is-the-exploit is to be believed.
-
View post
Ich will einfach nur mal anmerken, dass ich dem aktuellen Trend zu Schnauzbärten absolut nichts abgewinnen kann.
-
View post
This tracks with my views. AI is starting to get dangerous. https://www.planned-obsolescence.org/p/the-hugging-face-attack-surprised?open=false
-
View post
Is it a bad sign if you&#39;re tempted to post https://www.youtube.com/watch?v=LFrdqQZ8FFc in the chat window of an online meeting? Asking for a friend :-)
-
View post
As half of the talks here at the security conference in Linz mention digital sovereignty, I just had to make this meme:
-
View post
Two weeks of the CRA-SRP. Here are my notes: https://www.cert.at/en/blog/2026/9/cra-reporting-the-first-two-weeks
-
View post
The &quot;temperature&quot; parameter for LLMs could also be called &quot;drunkenness&quot; (or more posh: &quot;inebriation level&quot;).
-
View post
"Open weights compress margin at the model layer and move value to the infrastructure layer. Simply speaking it is getting very hard to justify high prices for LLM APIs and the infrastructure becomes much more important." https://msukhareva.substack.com/p/is-kimi-k3-really-distilled-from I see no chance that OpenAI/Anthropic will be able to pay back their debt if they can't stay miles ahead of open models.
-
View post
FYI: durch den Brand auf der Floridsdorfer Brücke (Siehe https://wien.orf.at/stories/3359189/) sind auch Glasfasern unterbrochen worden. Es zeigt sich gerade, wer in redundante Leitungen investiert hat.
-
View post
Almost 10 years old: https://medium.com/message/everything-is-broken-81e5f33a24e1
-
View post
The report from CERT.PL covering the attacks on the Polish energy system is finally available: https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/
-
View post
I&#39;m not sure I fully agree with the premise of this paper, but the historical review of the LE vs. Encryption debate is really helpful: https://arxiv.org/html/2603.00841v1
-
View post
Via Krugman: https://www.bloomberg.com/graphics/2026-opinion-hegseth-culture-wars-are-inviting-military-disaster/
-
View post
“The point is that we are all capable of believing things which we know to be untrue, and then, when we are finally proved wrong, impudently twisting the facts so as to show that we were right. Intellectually, it is possible to carry on this process for an indefinite time: the only check on it is that sooner or later a false belief bumps up against solid reality, usually on a battlefield.” ― George Orwell
-
View post
Is it already time to start calling Trump the American Führer? Or should we wait until he decides to order more explicit war-crimes?
-
View post
A lot of what the author writes also applies to me. I really should do more puzzles. https://www.theguardian.com/lifeandstyle/2026/apr/13/world-noise-jigsaw-puzzling-helped-calm-mind
-
View post
Ich trage am Dienstag in Salzburg zum Thema &quot;Lawful Access to encrypted data&quot; vor. https://cccsbg.at/blog/2026/04/10/VortragOtmarLendl.html
-
View post
Triggered by reading my slides from last year: What happened with the minerals deal that Trump so desperately wanted from Ukraine last year?
-
View post
I just read https://philpapers.org/rec/LERTAF I have a really hard time reading philosophical reasoning. Nevertheless, for me, there are a number of red flags in the text. I cannot support the conclusion of the author. What do you all think?