Charles-Louis Machuron, Silicon Luxembourg, recently interviewed @jvdham.nl, @first.org liaison member and associate professor at the University of Twente, on VulnOptiCON 2026. Read more: go.first.org/JxwxD #cybersecurity #infosec #VulnerabilityManagement

Luxembourg Set To Host Cyber Event VulnOptiCON 2026 - Silicon Luxembourg

FIRST rebrands Vuln4Cast as VulnOptiCON 2026, a three-day Luxembourg conference on AI, vulnerability forecasting and cybersecurity risk, Sept 23-25.

siliconluxembourg.lu

The paper I wrote together with @jvdham.nl and Roland van Rijswijk-Deij titled "Domijn: The Security of Domain Registrars and the Risk of a Domain Name Takeover" for the Workshop on the Economics of Information Security (WEIS) 2026 is now available! weis2026.econinfosec.org/wp-content/u...

Do you like knowing stuff or maybe learning stuff? Stuff about security vulnerabilities? Maybe even data stuff (or things) about security vulnerabilities. Then heyyyy, do we have the workshop for you! CFP ends May 17! www.vulnopticon.org

I am continuously impressed by Export Control lists. Apparently now we can't have free lunch in space with our computers. knowledge4policy.ec.europa.eu/sites/defaul...

Regarding the ffmpeg drama, as discussed by @patrick.risky.biz on risky.biz: we should also consider that ffmpeg is/has been used by Google in Chrome and Youtube. Even if it's not directly, so many video makers are using that library, that Google really should bear some cost of development there.

Risky Business Media

News and commentary for cybersecurity and intelligence professionals

risky.biz

When the Dutch have to take a detour on their bike, their world turns upside down.

Als de tweede kamer politie inzet zo belangrijk vindt, zullen we dan voetbalwedstrijden ook maar verbieden? #xr #anbi

How do I disable announced notifications from workout on my watch? These notifications are interrupting music or podcasts when I’m cycling and I don’t want them.

Since iOS 18.2 i have problems with Mail. It’s hardly downloading new mail from my imap server. Anybody else having this too? Anything I can do about it to fix? Nothing changed on my server end (Dovecot). I’ve even tried to disable IMAP IDLE, but that also does not help.

In many of my ethics lectures I use the example of the New York taxi dataset. Imagine my surprise that the Dutch government now wants to introduce such a system. autoriteitpersoonsgegevens.nl/actueel/ap-c...

AP: centrale database taxi’s te groot privacyrisico

Het kabinet wil een centrale database taxi's. De privacy van passagiers moet beter beschermd worden, zegt de AP.

autoriteitpersoonsgegevens.nl

Great numbers showing up for the higher education protest

Hakuna Mafuckit indeed.

Password policies are evil and should be burned to the ground. The piece that Stuart Schechter wrote on their history however, is so incredibly misguided. It is bonkers to think that we would have had a more secure world without password hashing.

Anyone interested in researching multi-level marketing schemes/scams #mls
I got a message from someone claiming to offer work for #gamechangersf sending me an invite for https://gamechangersfpos[.]com

Waarom wordt gecondenseerde melk verkocht in blikjes van 397g? #dtv

The way we do #science 🧪currently could do with some shakeups. This blog post by experimental history builds on some earlier posts, and lays bare the pain points of the current scientific climate. But it also presents a way to get out of that! Let’s build more #ScienceHouses !

Let’s build a fleet and change the world

Abandon Big Ship, get on a Little Ship

experimental-history.com

It's fascinating to see that AtlanticCouncil uses archive.ph in their latest "Sleight of Hand" report: www.atlanticcouncil.org/in-depth-res...

Sleight of hand: How China weaponizes software vulnerabilities

China's new vulnerability management system mandates reporting to MIIT within 48 hours, restricting pre-patch publication and POC code. This centralized approach contrasts with the US voluntary system...

atlanticcouncil.org

This symbol selection is just mean. 🧪

Interesting post on what can go wrong in BGP, how he tested for this and how this was finally fixed.

Grave flaws in BGP Error handling

blog.benjojo.co.uk

CVE 2020-19909 in Curl has been interesting to watch. It's weird that NVD decided last week that it needed a CVSS score, and even weirder that they came up with a 9.8 for it. Now it's been marked "Disputed" with an explanation that it is not likely to be exploited.

🧪

Jeroen van der Ham @jvdham.nl · 3y ago

Interested in a PhD Research position on internet security and post-quantum developments? Please apply! utwentecareers.nl/en/vacancies...

Interested in a PhD Research position on internet security and post-quantum developments? Please apply! utwentecareers.nl/en/vacancies...

2x PhD position on transitioning internet protocols and applications to post-quantum cryptography - ...

You will perform your research as part of the DACS group, the Twente University Centre for Cybersecurity Research (TUCCR) and the international context. Interaction with international network operator...

utwentecareers.nl

Naomi Wu and the Silence That Speaks Volumes https://www.hackingbutlegal.com/naomi-wu-and-the-silence-that-speaks-volumes/

Naomi Wu and the Silence That Speaks Volumes

When China's prodigious tech influencer, Naomi Wu, found herself silenced, it wasn't just the machinery of a surveillance state at play. Instead, it was a confluence of state repression and the someti...

hackingbutlegal.com

A wonderful short introduction to the current state of LLMs, and some helpful pointers to start hacking yourself (warning: 🐰🕳️) https://simonwillison.net/2023/Aug/3/weird-world-of-llms/

Catching up on the weird world of LLMs

I gave a talk on Sunday at North Bay Python where I attempted to summarize the last few years of development in the space of LLMs—Large Language Models, the technology …

simonwillison.net

I thought that ‘X’ looked familiar. Now you know too:

Can’t wait till they’re all talking about “x-ing”, that does not sound awkward at all.

Kevin Rothrock@kevinrothrock.me · 3y ago

Amazing. Twitter and tweeting have become synonymous with microblogging to the point that imitators come up with shit as dumb as "skeeting" and "tooting," and Musk is throwing it out the window.

It seems surprising that as a society we lose the ability to do certain things. And then this week I ran into one: we have lost the ability to quickly set up a mailinglist. Even the age old mailop list ends up in my spam folder due to standard outlook spam filtering.

When was the last time a company was compromised _solely_ because a user clicked on a link? Which product is so dangerous that an entire company can be shut down because someone used that product as intended? Details welcome!