@jensvoid

Hack the Planet! On a #yolo trip around the word during a pandemic. Involved in https://xitter.cf/t.co/UATbdfU5vH, #efail, #pdfex. Raw tech. No chit-chat.

 Planet Earth
nds.rub.de/chair/people/jmueller/
Joined March 2013
  • Tweets228
  • Following219
  • Followers1.3K
20Media
Jens Müller retweeted
heise Security@heisec12 Oct 2021
Angreifer könnten digitale Unterschrift in LibreOffice und OpenOffice fälschen heise.de/news/Angreifer-koen… #LibreOffice #OpenOffice

Angreifer könnten digitale Unterschrift in LibreOffice und OpenOffice fälschen

Es gibt wichtige Sicherheitsupdates für die Office-Pakete LibreOffice und OpenOffice.

heise.de
21
9
Replying to @lambdafu
@lambdafu & @jurajsomorovsky evaluate the real-world attack surface of web browsers and widely-deployed email and FTP servers in lab experiments and with internet-wide scans in this #BHUSA Briefing informatech.co/3cy70QQ
3
10
Jens Müller retweeted
-@lambdafu9 Jun 2021
We found another flaw in the design of TLS! If you have servers that share certificates across services you might want to take a look at this: alpaca-attack.com/. 🧵👇
9
237
42
506
New paper: "ALPACA: Application Layer Protocol Confusion -Analyzing and Mitigating Cracks in TLS Authentication" to be presented @USENIXSecurity '21. Joint work with @lambdafu @dr4ys3n @ic0nz1 @dues__ @jensvoid @jurajsomorovsky @JoergSchwenk. 1/
2
17
47
New paper on how to fix #efail style attacks against e2e encrypted email, including OpenPGP and S/MIME. Joint work with @JoergSchwenk @lambdafu @dues__ @jensvoid @jurajsomorovsky @seecurity. To be presented at @acm_ccs 2020. Thread:
1
27
3
66
Jens Müller retweeted
heise Security@heisec21 Aug 2020
Datenklau über Mailto-Links heise.de/news/Datenklau-uebe… #Datenklau #EMail

Datenklau über Mailto-Links

Wer Links benutzt, um Mails zu versenden, sollte deren Inhalt zuvor genau kontrollieren.

heise.de
19
2
15
Jens Müller retweeted
Golem.de
@golem18 Aug 2020
E-Mail: Gefährliche Mailto-Links können Daten stehlen #mailto glm.io/150326?t

E-Mail: Gefährliche Mailto-Links können Daten stehlen - Golem.de

Eine undokumentierte Erweiterung von Links auf Mailadressen erlaubt Dateianhänge - ein erhebliches Sicherheitsrisiko.

golem.de
15
15
Replying to @JamesHenstridge @jensvoid
Yes. See me other answer, for some reason this escaped KDE Security Team radar and i thought it had not been reported to KDE while it had indeed been.
1
4
Jens Müller retweeted
heise Security@heisec11 Jun 2020
Sicherheitsupdate: LibreOffice könnte private Daten gefährden heise.de/security/meldung/Si… #OfficeSuite #Patch
24
7
Jens Müller retweeted
iX@iXmagazin10 Aug 2020
Black Hat 2020: Vom DoS bis zum Datenklau - Angriffe über PDF-Dokumente heise.de/news/Vom-DoS-bis-zu… #BlackHat #BlackHat2020

Black Hat 2020: Vom DoS bis zum Datenklau - Angriffe über PDF-Dokumente

Wer sich mit PDFs gegenüber Office-Dokumenten in Sicherheit wiegt, liegt falsch. Auf der Black Hat 2020 zeigte Jens Müller mehrere mögliche Angriffe.

heise.de
16
1
17
Every year @BlackHatEvents content is superb but then your most fuv talks will be always scheduled in parallel 😝 Murphy's law never fails! Ya'll @naehrdine @jensvoid @lavados did such a phenomenal work with ur talks! 👏Thank you tons for your efforts and I will re-watch 😉
1
4
15
Jens Müller retweeted
Eyal Ronen@eyalr021 Jul 2020
Replying to @vanhoefm
@vanhoefm and I are happy to announce the program of the third Crypto Workshop on Attacks in Cryptography crypto.iacr.org/2020/wac.php! Very happy to have @zwitschermitzi, @danielmgmi, @dfaranha, Akira Takahashi, @shaananc, @naehrdine, Pierrick Gaudry, @francozappa, and @jensvoid!
1
21
4
36
Replying to @jensvoid
@jensvoid performed a systematic analysis of the capabilities of malicious PDFs and found 4 classes of vulns in viewers: (1) Denial-of-Service attack (2) Information disclosure attacks (3) Data manipulation attacks & (4) Execution of code #BHUSA ow.ly/I17s30qTMUc
1
4
Jens Müller retweeted
cirosec GmbH
@cirosec5 Feb 2020
Replying to @jensvoid
@jensvoid explains PDFex at #ITDefense
1
1
Jens Müller retweeted
Andreas Falk@andifalk10 Dec 2019
Breaking pdf security by @CheariX and @jensvoid #owasp_d2019
3
9
Slides of the #BHEU talk with @jensvoid on #PDFex are available at i.blackhat.com/eu-19/Thursda…!
7
1
18
Jens Müller retweeted
OWASP Germany@OWASP_de26 Nov 2019
Warum "verschlüsselt und signiert" nicht zwangsläufig auch "vertraulich und authentisch" bedeutet, zeigen uns @jensvoid, @chearix und @v_mladenov in ihrem Talk "How to break PDF security" auf dem German OWASP Day! Infos und Tickets unter god.owasp.de/schedule/"
4
9
PDF security: "We tested 27 PDF viewers and found all of them vulnerable to at least one of our attacks.” Both Foxit and Adobe Reader susceptible to attacks albeit *with* user interaction. — Jens Müller and Fabian Ising at Black Hat Europe 2019 #BHEU
PDFs are as popular as the Queen (UK Google search results)

ALT PDFs are as popular as the Queen (UK Google search results)

1
6
PDF security weakness: The specification means every reader allows partial encryption, or mixing encrypted and unencrypted content, warn Jens Müller and Fabian Ising at Black Hat Europe 2019 #BHEU
3
8
Pdf versus the Queen 👑 @BlackHatEvents #BHEU they didn't talk about the corgies doggos
3
7
Load more