corpus.blog
41554 blogs · [ { "id": "01a0874a-b801-731d-b75f-996c8862cb80", "title": "Mixing up Public and Private Keys in OpenID Connect deployments", "url": "https://blog.hboeck.de/archives/909-Mixing-up-Public-and-Private-Keys-in-OpenID-Connect-deployments.html", "published_at": "2025-02-25T11:08:00+00:00" }, { "id": "01a0874a-b805-72e2-8643-09e8fa42ac9f", "title": "Private Keys in the Fortigate Leak", "url": "https://blog.hboeck.de/archives/908-Private-Keys-in-the-Fortigate-Leak.html", "published_at": "2025-01-17T16:04:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478bb3dfc1", "title": "How to create a Secure, Random Password with JavaScript", "url": "https://blog.hboeck.de/archives/907-How-to-create-a-Secure,-Random-Password-with-JavaScript.html", "published_at": "2024-02-05T14:23:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478c81f842", "title": "A Newsletter about Climate Change and Industrial Decarbonization", "url": "https://blog.hboeck.de/archives/905-A-Newsletter-about-Climate-Change-and-Industrial-Decarbonization.html", "published_at": "2023-11-27T20:09:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478d623ca5", "title": "Please do not put IP addresses into DNS MX records", "url": "https://blog.hboeck.de/archives/904-Please-do-not-put-IP-addresses-into-DNS-MX-records.html", "published_at": "2021-02-21T17:04:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478dce68fd", "title": "File Exfiltration via Libreoffice in BigBlueButton and JODConverter", "url": "https://blog.hboeck.de/archives/902-File-Exfiltration-via-Libreoffice-in-BigBlueButton-and-JODConverter.html", "published_at": "2020-10-21T12:14:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478eaf602e", "title": "Generating CRIME safe CSRF Tokens", "url": "https://blog.hboeck.de/archives/900-Generating-CRIME-safe-CSRF-Tokens.html", "published_at": "2020-04-13T19:54:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478ec9cfc7", "title": "Userdir URLs like https://example.org/~username/ are dangerous", "url": "https://blog.hboeck.de/archives/899-Userdir-URLs-like-httpsexample.orgusername-are-dangerous.html", "published_at": "2020-04-06T09:44:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478f19ffbe", "title": "#include", "url": "https://blog.hboeck.de/archives/898-include-etcshadow.html", "published_at": "2019-12-16T17:38:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c3478f87d866", "title": "Security Issues with PGP Signatures and Linux Package Management", "url": "https://blog.hboeck.de/archives/897-Security-Issues-with-PGP-Signatures-and-Linux-Package-Management.html", "published_at": "2019-09-13T12:17:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c347901d4812", "title": "How my personal Bug Bounty Program turned into a Free Security Audit for the Serendipity Blog", "url": "https://blog.hboeck.de/archives/896-How-my-personal-Bug-Bounty-Program-turned-into-a-Free-Security-Audit-for-the-Serendipity-Blog.html", "published_at": "2018-11-12T08:22:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c347903e9dc1", "title": "Efail: HTML Mails have no Security Concept and are to blame", "url": "https://blog.hboeck.de/archives/894-Efail-HTML-Mails-have-no-Security-Concept-and-are-to-blame.html", "published_at": "2018-06-27T20:43:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c347910b0895", "title": "efail: Outdated Crypto Standards are to blame", "url": "https://blog.hboeck.de/archives/893-efail-Outdated-Crypto-Standards-are-to-blame.html", "published_at": "2018-05-22T21:08:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c34791ae0345", "title": "Introducing Snallygaster - a Tool to Scan for Secrets on Web Servers", "url": "https://blog.hboeck.de/archives/892-Introducing-Snallygaster-a-Tool-to-Scan-for-Secrets-on-Web-Servers.html", "published_at": "2018-04-11T11:41:00+00:00" }, { "id": "01a0874a-b806-7388-967a-c34792618647", "title": "Some minor Security Quirks in Firefox", "url": "https://blog.hboeck.de/archives/891-Some-minor-Security-Quirks-in-Firefox.html", "published_at": "2017-11-16T16:24:00+00:00" } ] posts Claim your blog
Back to Hanno's blog
Blog · corpus.blog/blogs/blog.hboeck.de/posts

Hanno's blog

blog.hboeck.de

2025

Mixing up Public and Private Keys in OpenID Connect deploymentsoriginal ↗
25 Feb 2025
Private Keys in the Fortigate Leakoriginal ↗
17 Jan 2025

2024

How to create a Secure, Random Password with JavaScriptoriginal ↗
5 Feb 2024

2023

A Newsletter about Climate Change and Industrial Decarbonizationoriginal ↗
27 Nov 2023

2021

Please do not put IP addresses into DNS MX recordsoriginal ↗
21 Feb 2021

2020

File Exfiltration via Libreoffice in BigBlueButton and JODConverteroriginal ↗
21 Oct 2020
Generating CRIME safe CSRF Tokensoriginal ↗
13 Apr 2020
Userdir URLs like https://example.org/~username/ are dangerousoriginal ↗
6 Apr 2020

2019

#includeoriginal ↗
16 Dec 2019
Security Issues with PGP Signatures and Linux Package Managementoriginal ↗
13 Sept 2019

2018

How my personal Bug Bounty Program turned into a Free Security Audit for the Serendipity Blogoriginal ↗
12 Nov 2018
Efail: HTML Mails have no Security Concept and are to blameoriginal ↗
27 Jun 2018
efail: Outdated Crypto Standards are to blameoriginal ↗
22 May 2018
Introducing Snallygaster - a Tool to Scan for Secrets on Web Serversoriginal ↗
11 Apr 2018

2017

Some minor Security Quirks in Firefoxoriginal ↗
16 Nov 2017