Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

Otmar Lendl

@otmar@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

ISP veteran.
Built up CERT.at.
National and international CSIRT liaison for CERT.at

Private Blog is here: https://lendl.priv.at

229 Followers
75 Following
39 Posts
Joined November 06, 2022
Website:
https://lendl.priv.at/
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Facepalm of the day:

A ticket re-opened because the requestor clicked "Like" in his MUA (Outlook).

54
0
17
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2w ago

The "temperature" parameter for LLMs could also be called "drunkenness" (or more posh: "inebriation level").

2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 3w ago

As half of the talks here at the security conference in Linz mention digital sovereignty, I just had to make this meme:

5
0
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Is it a bad sign if you're tempted to post https://www.youtube.com/watch?v=LFrdqQZ8FFc in the chat window of an online meeting?

Asking for a friend :-)

Monty Python Royal Society For Putting Things On Top of Other Things

3
0
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2w ago

Two weeks of the CRA-SRP. Here are my notes: https://www.cert.at/en/blog/2026/9/cra-reporting-the-first-two-weeks

cert.at

CERT.at CRA - Reporting: The first two weeks

1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

https://ifloz.substack.com/p/carney-just-threatened-to-send-america

Well said. Brussels, take note. @EUCommission@ec.social-network.europa.eu

CARNEY JUST THREATENED TO SEND AMERICA BACK TO THE FUCKING STONE AGE
ifloz.substack.com

CARNEY JUST THREATENED TO SEND AMERICA BACK TO THE FUCKING STONE AGE

Twelve hours after walking out of Washington, Carney stood up and read the old relationship its eulogy. In two languages. With the pulse of a man ordering a flat white.

6
0
10
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2mo ago

https://signal.org/blog/automatic-key-verification/

Yet another take on the long running problem of how to detect malicious changes in public identifier->public-key directories.

With this, Signal is closing down one way they could have been forced to cooperate in a state-run interception regime.

Introducing Automatic Key Verification
Signal Messenger

Introducing Automatic Key Verification

Signal now offers a feature called “automatic key verification” which complements the existing safety number system. Signal is always end-to-end encrypted, and automatic key verification provides an additional, streamlined way to confirm that there’s no unexpected party between you and the other ...

8
0
5
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 3mo ago
FYI: durch den Brand auf der Floridsdorfer Brücke (Siehe https://wien.orf.at/stories/3359189/) sind auch Glasfasern unterbrochen worden. Es zeigt sich gerade, wer in redundante Leitungen investiert hat.
wien.ORF.at

Floridsdorfer Brücke nach Brand wieder frei

Nach einem Brand auf der Floridsdorfer Brücke wurde diese am Vormittag für den Verkehr gesperrt. Nach mehreren Stunden konnte sie am Nachmittag wieder freigegeben werden. Für die Straßenbahn gibt es noch eine Geschwindigkeitseinschränkung.

17
5
13
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Ich will einfach nur mal anmerken, dass ich dem aktuellen Trend zu Schnauzbärten absolut nichts abgewinnen kann.

2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

When will the rest of the world understand that

"Iran analysts, some of whom are in touch with regime officials, tell me that Tehran appears to believe that Trump isn’t interested in a serious peace pact and can’t be trusted to uphold one anyway." (From https://www.politico.com/news/magazine/2026/08/12/the-us-forgot-the-lessons-of-iraq-now-its-desperate-for-ideas-on-iran-01033217)

applies to all negotiations (including trade deals) with the US under Trump?

POLITICO

The Iran War Is a Whole New Level of Quagmire for the US

There are three main camps emerging with proposals, all of which have downsides.

3
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Trying to buy a renfe train ticket in Barreda:

The first machine seems to be a tele-presence application where you get a life video stream from some clerk: miserable audio and video quality. All we understood was to use another machine. Well, that one showed this error message:

3
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2mo ago

Worth reading: https://craigunger.substack.com/p/nothing-moves-the-needle

We're not quite at that level in Austria, but the shared reality is under heavy pressure here as well.

Nothing Moves the Needle
craigunger.substack.com

Nothing Moves the Needle

Not that long ago, the press could root out corruption, topple presidents, and end wars. Now, even the biggest scoops have little impact. Here's how and why the media lost its mojo.

4
0
2
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

This tracks with my views. AI is starting to get dangerous.

https://www.planned-obsolescence.org/p/the-hugging-face-attack-surprised?open=false

The Hugging Face attack surprised me
planned-obsolescence.org

The Hugging Face attack surprised me

It’s a major warning shot, and might be the last one we get

1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Rap sheet for AI models and labs: https://www.felonybench.com/

I'm wondering when we'll see the first court case that will determine the legal responsibility for such events.

felonybench.com
2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

https://www.bbc.com/news/articles/clyqpx6xk69o

Let's see if US courts do what the EU has been too timid to do.

Meta social media addiction trial to begin as Instagram and Facebook could be forced to change
bbc.com

Meta social media addiction trial to begin as Instagram and Facebook could be forced to change

US states are suing the social media giant to force an overhaul of its platforms for young users.

2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

Worth reading: https://blog.cryptographyengineering.com/2026/08/14/everything-is-about-to-go-dark/

Will LLMs kill the targeted exploitation market and thus make the "going dark" issue pressing again?

Everything is about to “go dark”
A Few Thoughts on Cryptographic Engineering

Everything is about to “go dark”

I’m coming down from spending a few days at Usenix Security, right here in my hometown of Baltimore. This means that my days have been taken up with two kinds of conversation: first, explaini…

2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

One of the premises of the CRA is the fact that you can share info on the existence of a vulnerability + mitigation measures without helping a potential attacker.

In the age of AI, that might not be true any more if https://anil.recoil.org/notes/rumour-is-the-exploit is to be believed.

Just a rumour of a bug is enough to find a security exploit these days
Anil Madhavapeddy

Just a rumour of a bug is enough to find a security exploit these days

Thinking through how the conventional OSS security embargoes no longer buy us time, and what open source maintainers might do instead to respond

1
0
2
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 8mo ago

The report from CERT.PL covering the attacks on the Polish energy system is finally available:

https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/

Energy Sector Incident Report - 29 December 2025
cert.pl

Energy Sector Incident Report - 29 December 2025

CERT Polska presents a report on the analysis of an incident in the energy sector that occurred on 29 December 2025. The attacks were destructive in nature and targeted wind and photovoltaic farms, a large combined heat and power plant, and a company from the manufacturing sector. The publication aims to raise awareness of the risks associated with sabotage in cyberspace.

18
2
21
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

This is not social media junk food, but real, sustaining food for thought:

https://youtube.com/playlist?list=PLPNSuH4X6has

(Timothy Snyder: Hitler and Stalin Today)

Timothy Snyder: Hitler and Stalin Today
YouTube

Timothy Snyder: Hitler and Stalin Today

Munk School of Global Affairs & Public Policy

1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago
Replying to
@Jer @cstross @isaackuo and now Trump is trying to out-escalate religious fanatics whose fetish is martyrdom. Ain't going to work.
8
1
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago

I'm not sure I fully agree with the premise of this paper, but the historical review of the LE vs. Encryption debate is really helpful:

https://arxiv.org/html/2603.00841v1

arxiv.org

Security Is Not Enough

6
0
2
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago

Is it already time to start calling Trump the American Führer?

Or should we wait until he decides to order more explicit war-crimes?

4
1
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago

Triggered by reading my slides from last year:

What happened with the minerals deal that Trump so desperately wanted from Ukraine last year?

2
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago

“The point is that we are all capable of believing things which we know to be untrue, and then, when we are finally proved wrong, impudently twisting the facts so as to show that we were right. Intellectually, it is possible to carry on this process for an indefinite time: the only check on it is that sooner or later a false belief bumps up against solid reality, usually on a battlefield.”
― George Orwell

2
0
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago

Almost 10 years old: https://medium.com/message/everything-is-broken-81e5f33a24e1

Everything Is Broken
Medium

Everything Is Broken

Once upon a time, a friend of mine accidentally took over thousands of computers. He had found a vulnerability in a piece of software and…

1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago

Ich trage am Dienstag in Salzburg zum Thema "Lawful Access to encrypted data" vor.

https://cccsbg.at/blog/2026/04/10/VortragOtmarLendl.html

cccsbg.at

Lawful access to encrypted data - UPDATE

Update, 2026-04-15 Unser Hackspace hat nur eine begrenzte Kapazität für Personen, um es besser abschätzen zu können, wie viele Interessierte Otmars Vortrag ...

1
0
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago

A lot of what the author writes also applies to me. I really should do more puzzles.

https://www.theguardian.com/lifeandstyle/2026/apr/13/world-noise-jigsaw-puzzling-helped-calm-mind

The one change that worked: in a hectic world, taking up jigsaw puzzles calmed my mind
the Guardian

The one change that worked: in a hectic world, taking up jigsaw puzzles calmed my mind

Every time I successfully place a piece, I get a little rush and a sense of achievement. How could I have thought puzzles were only for children?

1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 6mo ago

Via Krugman: https://www.bloomberg.com/graphics/2026-opinion-hegseth-culture-wars-are-inviting-military-disaster/

bloomberg.com
1
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 7mo ago
Replying to
@tsturm I wrote my first lines of Basic on a ZX81. Long, long time ago.
1
1
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 45mo ago
Replying to
@brodnig im Kontext TikTok lesenswert von Cory Doctorow: https://pluralistic.net/2023/01/21/potemkin-ai/#hey-guys
pluralistic.net

Pluralistic: Tiktok’s enshittification (21 Jan 2023) – Pluralistic: Daily links from Cory Doctorow

1
0
1
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago
Replying to
@CERT_at@ioc.exchange See also https://www.cert.europa.eu/blog/ai-vulnerability-discovery-defenders-must-adapt
AI is changing the economics of vulnerability discovery
cert.europa.eu

AI is changing the economics of vulnerability discovery

AI-powered tools are discovering vulnerabilities at machine speed. Here is what it means for defenders, and why the time to adapt is now.

0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2mo ago
Replying to
@jenyetagain.bsky.social We always joked that computers do what you tell them to do, and not what you want them to do. This still holds true: just because I can now formulate instructions to the LLM in English, it doesn't guarantee that the system can understand my intention with all implied constraints.
0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2mo ago
Replying to
@pluralistic@mamot.fr I experienced the same effect with news articles: If you don't know much about a subject, then the journalist sounds reasonable and well informed, but if the article is about your core competency, then you notice where the journalist was sloppy. The depressing part is that the other articles are likely not better, but you just don't spot the mistakes.
0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago

I just read https://philpapers.org/rec/LERTAF

I have a really hard time reading philosophical reasoning. Nevertheless, for me, there are a number of red flags in the text. I cannot support the conclusion of the author.

What do you all think?

philpapers.org
0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 2mo ago
"Open weights compress margin at the model layer and move value to the infrastructure layer. Simply speaking it is getting very hard to justify high prices for LLM APIs and the infrastructure becomes much more important." https://msukhareva.substack.com/p/is-kimi-k3-really-distilled-from I see no chance that OpenAI/Anthropic will be able to pay back their debt if they can't stay miles ahead of open models.
Is Kimi K3 Really Distilled From Anthropic's Fable?
msukhareva.substack.com

Is Kimi K3 Really Distilled From Anthropic's Fable?

A look at what distillation requires, and why Anthropic's Fable numbers don't support the accusation.

0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 5mo ago
Replying to
@rrb @cstross @mitch @lasagne @pluralistic like Pepe?
0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 1mo ago

How the Australians turned a duck into a platypus:

https://www.youtube.com/watch?v=jltRq_KlGH4

Australia Killed the Duck Curve (With Batteries)

0
0
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 4mo ago
Replying to
@vautee@chaos.social @skoops@skoops.social überrascht?
0
1
0
0
Open post
Otmar Lendl @otmar@infosec.exchange
· 47mo ago
Replying to
@HatTheButcher@mastodon.social Has your kid just received a driver’s license?
0
0
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Pricing
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 21:38:07 UTC