Lol. @HackenProof a reputable bug bounty platform sends out invites for their program to attack Russian critical infrastructure (SCADA, banks, energy). Crazy times & Happy hunting. #StandingWithUkraine hackenproof.com/ukraine-will…
Jens Müller retweeted
Angreifer könnten digitale Unterschrift in LibreOffice und OpenOffice fälschen heise.de/news/Angreifer-koen… #LibreOffice #OpenOffice
0day RCE in #Ghostscript going wild. This issue was found independently by @emil_lerner and @jensvoid. Fun fact: GS is everywhere. Even LESS(1) is affected.
If you build #Ghostscript from source, apply this patch to counter the latest RCE (now known as CVE-2021-3781):
git.ghostscript.com/?p=ghost…
Jens Müller retweeted
@lambdafu & @jurajsomorovsky evaluate the real-world attack surface of web browsers and widely-deployed email and FTP servers in lab experiments and with internet-wide scans in this #BHUSA Briefing informatech.co/3cy70QQ
Jens Müller retweeted
We found another flaw in the design of TLS! If you have servers that share certificates across services you might want to take a look at this: alpaca-attack.com/. 🧵👇
Jens Müller retweeted
New paper: "ALPACA: Application Layer Protocol Confusion -Analyzing and Mitigating Cracks in TLS Authentication" to be presented @USENIXSecurity '21. Joint work with @lambdafu @dr4ys3n @ic0nz1 @dues__ @jensvoid @jurajsomorovsky @JoergSchwenk. 1/
"PhD Defense" can finally be crossed off that to-do list. So long @HGI_Bochum, and thanks for all the fish!
Jens Müller retweeted
New paper on how to fix #efail style attacks against e2e encrypted email, including OpenPGP and S/MIME. Joint work with @JoergSchwenk @lambdafu @dues__ @jensvoid @jurajsomorovsky @seecurity. To be presented at @acm_ccs 2020. Thread:
Have you ever heard of the mailto:?attach=~/… parameter? It allows to include arbitrary files on disk. So, why break PGP if you can politely ask the victim's mail client to include the private key? (1/4)
My fault. Even though Thunderbird removed the mailto:?attach feature, it still seems present in distros that apply xdg-email to parse mailto URLs.
Thanks to @j_o_n__w and @Ug_0Security for all the debugging :).
Original report for Thunderbird now public: bugzilla.mozilla.org/show_bu…
Jens Müller retweeted
E-Mail: Gefährliche Mailto-Links können Daten stehlen #mailto glm.io/150326?t
Jens Müller retweeted
Yes. See me other answer, for some reason this escaped KDE Security Team radar and i thought it had not been reported to KDE while it had indeed been.
This flaw, among others, is described in our IEEE CNS paper "Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption" with @lambdafu, @dues__, @seecurity, and @joergschwenk: nds.ruhr-uni-bochum.de/media… (4/4)
Such *simple stupid* mailto:?attach tricks worked in Thunderbird for Debian, GNOME Evolution (CVE-2020-11879), KDE KMail (CVE-2020-11880), IBM/HCL Notes (CVE-2020-4089), and Pegasus Mail. (3/4)
You can even leak complete directories in some mail clients. Interestingly, Evolution shows a warning if you want to include a single file, but the full home directory is fine. (2/4)
Together with @murgi, @chearix, @v_mladenov, @seecurity, and @joergschwenk, we had a look at the capabilities of malicious OOXML and ODF documents, resulting in a WOOT Paper: usenix.org/system/files/woot… | Artifacts: github.com/RUB-NDS/Office-Se…
Jens Müller retweeted
Sicherheitsupdate: LibreOffice könnte private Daten gefährden heise.de/security/meldung/Si… #OfficeSuite #Patch