simmac
@simmac.at
hacker, student, sw engineer, researcher.
appsec, privacy tech, tech&society, ctfs, making music, cooking etc
swe & sec&privacy researcher @zeitkapsl.eu
they/he/she
appsec, privacy tech, tech&society, ctfs, making music, cooking etc
swe & sec&privacy researcher @zeitkapsl.eu
they/he/she
thank you cryze for the detailed report, making it possible for me to completely understand, reproduce and fix the issue while being on the train home from a busy weekend at #froscon21 😅
Last week, @cryze.bsky.social, found and reported an issue in the handling of filenames in our mobile apps.
Sharing a video from a malicious imported share could lead to app-internal files being overwritten on the mobile appsRead more in cryzes excellent blog post cryze.at/posts/travel...
Sharing a video from a malicious imported share could lead to app-internal files being overwritten on the mobile apps
Travelling back a few Paths in my Zeitkapsl — cryze
Encryption does not automatically mean that the content is trustworthy.
cryze.at
August 27, 2026 at 2:58 PM
thank you cryze for the detailed report, making it possible for me to completely understand, reproduce and fix the issue while being on the train home from a busy weekend at #froscon21 😅
Reposted by simmac
Reposted by simmac
If you haven't said hello yet, you can still meet us at our #froscon21 booth this afternoon, there are still some stickers and vouchers (and candy 😄) left
#froscon #froscon2026
#froscon #froscon2026
August 16, 2026 at 1:22 PM
If you haven't said hello yet, you can still meet us at our #froscon21 booth this afternoon, there are still some stickers and vouchers (and candy 😄) left
#froscon #froscon2026
#froscon #froscon2026
Tested for you so you don't have to: A YubiKey 5C NFC does *not* survive the laundry 🙃
July 17, 2026 at 8:37 PM
Tested for you so you don't have to: A YubiKey 5C NFC does *not* survive the laundry 🙃
Gratulation @schieder.bsky.social, ihr habt es erfolgreich geschafft, eine Maßnahme, gegen die >70% der Bevölkerung sind (aber US Big Tech dafür), die bereits 5 Mal vom Parlament abgelehnt wurde, mit einem Geschäftsordnungstrick ohne qualifizierte Mehrheit durchzubringen.
"Sozialdemokratie" my ass
"Sozialdemokratie" my ass
Was im Standard-Artikel nicht erwähnt wird: Die Kombi aus Eilverfahren und dem Termin sorgt dafür, dass der Antrag höchstwahrscheinlich durchgeht, auch wenn er keine Mehrheit bekommen sollte: www.golem.de/news/ausnahm...
Ausnahme vom Datenschutz: Kehrtwende bei Chatkontrolle auf EU-Ebene - Golem.de
Überraschend wurde die anlass- und verdachtslose Massenüberwachung von Nutzern großer Plattformen wieder zur Abstimmung gestellt.
www.golem.de
July 9, 2026 at 12:26 PM
Gratulation @schieder.bsky.social, ihr habt es erfolgreich geschafft, eine Maßnahme, gegen die >70% der Bevölkerung sind (aber US Big Tech dafür), die bereits 5 Mal vom Parlament abgelehnt wurde, mit einem Geschäftsordnungstrick ohne qualifizierte Mehrheit durchzubringen.
"Sozialdemokratie" my ass
"Sozialdemokratie" my ass
Hey @spoe.at @schieder.bsky.social ist das euer Ernst?
www.derstandard.at/story/300000...
Dass ihr gerade in der Digitalpolitik so hoffnungslos lost seid, eh schlimm, aber dass ihr mitmacht bei dem Hintergehen der demokrat. Prozesse im EU-Parl. über das Dringlichkeitsverf ist nochmal erschreckend
www.derstandard.at/story/300000...
Dass ihr gerade in der Digitalpolitik so hoffnungslos lost seid, eh schlimm, aber dass ihr mitmacht bei dem Hintergehen der demokrat. Prozesse im EU-Parl. über das Dringlichkeitsverf ist nochmal erschreckend
EU-Parlament entscheidet am Donnerstag über "Chatkontrolle"-Verlängerung
Die Regelung ist im April ausgelaufen. Nächster Anlauf zur Verlängerung der Ausnahmeregelung für freiwillige Kontrolle
www.derstandard.at
July 8, 2026 at 9:00 PM
Hey @spoe.at @schieder.bsky.social ist das euer Ernst?
www.derstandard.at/story/300000...
Dass ihr gerade in der Digitalpolitik so hoffnungslos lost seid, eh schlimm, aber dass ihr mitmacht bei dem Hintergehen der demokrat. Prozesse im EU-Parl. über das Dringlichkeitsverf ist nochmal erschreckend
www.derstandard.at/story/300000...
Dass ihr gerade in der Digitalpolitik so hoffnungslos lost seid, eh schlimm, aber dass ihr mitmacht bei dem Hintergehen der demokrat. Prozesse im EU-Parl. über das Dringlichkeitsverf ist nochmal erschreckend
We made it! 😮💨 Es ist Nachmittag und es hat unter 30°C, Hitzewelle officially over 🎉
Ich werd so gut schlafen diese Nacht
Ich werd so gut schlafen diese Nacht
July 1, 2026 at 2:30 PM
We made it! 😮💨 Es ist Nachmittag und es hat unter 30°C, Hitzewelle officially over 🎉
Ich werd so gut schlafen diese Nacht
Ich werd so gut schlafen diese Nacht
Reposted by simmac
Pröll hält in seinem Brief fest: „Gerade Anthropic passt zu uns. Ein Unternehmen, das den ethischen Einsatz von KI nicht als Marketing begreift, sondern als Grundüberzeugung. […]
Dieses Unternehmen würde in Europa nicht eingeengt, es würde freigesetzt.“
Wie soll ich jetzt sagen…?
Es ist heiß!
Dieses Unternehmen würde in Europa nicht eingeengt, es würde freigesetzt.“
Wie soll ich jetzt sagen…?
Es ist heiß!
Pröll schlägt vor: Anthropic nach Europa bringen
orf.at
June 28, 2026 at 4:17 PM
Pröll hält in seinem Brief fest: „Gerade Anthropic passt zu uns. Ein Unternehmen, das den ethischen Einsatz von KI nicht als Marketing begreift, sondern als Grundüberzeugung. […]
Dieses Unternehmen würde in Europa nicht eingeengt, es würde freigesetzt.“
Wie soll ich jetzt sagen…?
Es ist heiß!
Dieses Unternehmen würde in Europa nicht eingeengt, es würde freigesetzt.“
Wie soll ich jetzt sagen…?
Es ist heiß!
Reposted by simmac
We regret that our event on Extreme Heat: Improving governance and strengthening action around the world has been cancelled due to the red extreme heat warning issued by the UK Met Office.
Our apologies to everyone who was planning to attend the event.
Our apologies to everyone who was planning to attend the event.
June 23, 2026 at 2:38 PM
We regret that our event on Extreme Heat: Improving governance and strengthening action around the world has been cancelled due to the red extreme heat warning issued by the UK Met Office.
Our apologies to everyone who was planning to attend the event.
Our apologies to everyone who was planning to attend the event.
Reposted by simmac
🍪❌ With the Digital Omnibus, the EU Commission FINALLY wanted to get rid of cookie banners. However, Google and some of the very EU Member States that are actually calling for simplification – including Germany and France – are now standing in the way.
June 23, 2026 at 6:57 AM
🍪❌ With the Digital Omnibus, the EU Commission FINALLY wanted to get rid of cookie banners. However, Google and some of the very EU Member States that are actually calling for simplification – including Germany and France – are now standing in the way.
Reposted by simmac
How do we advertise as a small bootstrapped privacy tech company staying true to ourselves?
Paying Google, Meta&co for ad space was never an option. Instead we decided to sponsor @noyb.eu and support their important work defending our rights, and booked an ad-slot in this weeks GDPRtoday newsletter
Paying Google, Meta&co for ad space was never an option. Instead we decided to sponsor @noyb.eu and support their important work defending our rights, and booked an ad-slot in this weeks GDPRtoday newsletter
June 5, 2026 at 12:50 PM
How do we advertise as a small bootstrapped privacy tech company staying true to ourselves?
Paying Google, Meta&co for ad space was never an option. Instead we decided to sponsor @noyb.eu and support their important work defending our rights, and booked an ad-slot in this weeks GDPRtoday newsletter
Paying Google, Meta&co for ad space was never an option. Instead we decided to sponsor @noyb.eu and support their important work defending our rights, and booked an ad-slot in this weeks GDPRtoday newsletter
Reposted by simmac
milo rau auch nur ein fetzenschaedel.
June 1, 2026 at 7:36 PM
milo rau auch nur ein fetzenschaedel.
Reposted by simmac
Privacy policies usually only get longer and longer.
Ours just got shorter.
We have replaced two external data processors with internal solutions.
Fewer third parties, less complexity, more control.
zeitkapsl.eu/en/privacy/
#privacy #gdpr #degoogle #madeineu
Ours just got shorter.
We have replaced two external data processors with internal solutions.
Fewer third parties, less complexity, more control.
zeitkapsl.eu/en/privacy/
#privacy #gdpr #degoogle #madeineu
May 19, 2026 at 2:05 PM
Privacy policies usually only get longer and longer.
Ours just got shorter.
We have replaced two external data processors with internal solutions.
Fewer third parties, less complexity, more control.
zeitkapsl.eu/en/privacy/
#privacy #gdpr #degoogle #madeineu
Ours just got shorter.
We have replaced two external data processors with internal solutions.
Fewer third parties, less complexity, more control.
zeitkapsl.eu/en/privacy/
#privacy #gdpr #degoogle #madeineu
Thank you for the audit @pwnd.at!
And yeah, they found a pretty embarrassing booboo by me (thank you for introducing me to that term in this context @mariozechner.at :D), our correctly implemented E2EE saved us from it being an actual issue impacting our users instead of it just being embarrassing
And yeah, they found a pretty embarrassing booboo by me (thank you for introducing me to that term in this context @mariozechner.at :D), our correctly implemented E2EE saved us from it being an actual issue impacting our users instead of it just being embarrassing
zeitkapsl security audit completed.
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Security Audit: CHECK
A big milestone for zeitkapsl.eu: Successfully passed the security audit
zeitkapsl.eu
April 30, 2026 at 11:20 AM
Thank you for the audit @pwnd.at!
And yeah, they found a pretty embarrassing booboo by me (thank you for introducing me to that term in this context @mariozechner.at :D), our correctly implemented E2EE saved us from it being an actual issue impacting our users instead of it just being embarrassing
And yeah, they found a pretty embarrassing booboo by me (thank you for introducing me to that term in this context @mariozechner.at :D), our correctly implemented E2EE saved us from it being an actual issue impacting our users instead of it just being embarrassing
Reposted by simmac
zeitkapsl security audit completed.
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Security Audit: CHECK
A big milestone for zeitkapsl.eu: Successfully passed the security audit
zeitkapsl.eu
April 30, 2026 at 10:49 AM
zeitkapsl security audit completed.
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Your memories were never accessible to attackers: end-to-end encryption works as designed.
An independent security firm found 16 issues; 12 were fixed immediately and re-verified.
The full report is now public.
zeitkapsl.eu/en/articles/...
#degoogle #madeineu
Reposted by simmac
Bin als Papa Freund der Privatsphäre. Fotos meines Kindes mag ich nicht auf Google Photos o.Ä. speichern.
Ein paar Freunde von mir habe vor einiger Zeit zeitkapsl.eu/de/ Europäischer Datenschutz für meine Photos von einem österreichischen Team and wirklich coolen Leuten. Schaut euch das an.
Ein paar Freunde von mir habe vor einiger Zeit zeitkapsl.eu/de/ Europäischer Datenschutz für meine Photos von einem österreichischen Team and wirklich coolen Leuten. Schaut euch das an.
Dein verschlüsselter Foto- und Videospeicher | zeitkapsl
Die europäische Alternative - Speichere, teile und organisiere deine wertvollen Erinnerungen in absoluter Privatsphäre. Schütze deine Fotos vor fremdem Zugriff.
zeitkapsl.eu
April 30, 2026 at 9:54 AM
Bin als Papa Freund der Privatsphäre. Fotos meines Kindes mag ich nicht auf Google Photos o.Ä. speichern.
Ein paar Freunde von mir habe vor einiger Zeit zeitkapsl.eu/de/ Europäischer Datenschutz für meine Photos von einem österreichischen Team and wirklich coolen Leuten. Schaut euch das an.
Ein paar Freunde von mir habe vor einiger Zeit zeitkapsl.eu/de/ Europäischer Datenschutz für meine Photos von einem österreichischen Team and wirklich coolen Leuten. Schaut euch das an.
Reposted by simmac
Spread the word! We still need more sponsors to make this event happen. If you're interested, let us know on social media or via email at crewBSidesVienna.at If you'd like to give a talk or run a workshop, please get in touch. We would love to hear your ideas for #BSidesVienna!
April 24, 2026 at 10:00 AM
Spread the word! We still need more sponsors to make this event happen. If you're interested, let us know on social media or via email at crewBSidesVienna.at If you'd like to give a talk or run a workshop, please get in touch. We would love to hear your ideas for #BSidesVienna!
Reposted by simmac
Finally! 🤩 Our position piece: Against the Uncritical Adoption of 'AI' Technologies in Academia:
doi.org/10.5281/zeno...
We unpick the tech industry’s marketing, hype, & harm; and we argue for safeguarding higher education, critical
thinking, expertise, academic freedom, & scientific integrity.
1/n
doi.org/10.5281/zeno...
We unpick the tech industry’s marketing, hype, & harm; and we argue for safeguarding higher education, critical
thinking, expertise, academic freedom, & scientific integrity.
1/n
September 6, 2025 at 8:13 AM
Finally! 🤩 Our position piece: Against the Uncritical Adoption of 'AI' Technologies in Academia:
doi.org/10.5281/zeno...
We unpick the tech industry’s marketing, hype, & harm; and we argue for safeguarding higher education, critical
thinking, expertise, academic freedom, & scientific integrity.
1/n
doi.org/10.5281/zeno...
We unpick the tech industry’s marketing, hype, & harm; and we argue for safeguarding higher education, critical
thinking, expertise, academic freedom, & scientific integrity.
1/n
Reposted by simmac
und die deutsche referenz implenentierung von eIDAS benötigt einen Google oder Apple Account.
zawos brauch ma in europa digitale souveranität wenn wir in die ärsche der tech freunde des orangenen kriechen können?
bmi.usercontent.opencode.de/eudi-wallet/...
zawos brauch ma in europa digitale souveranität wenn wir in die ärsche der tech freunde des orangenen kriechen können?
bmi.usercontent.opencode.de/eudi-wallet/...
Mobile Device Vulnerability Management Concept - German National EUDI Wallet: Architecture Documentation
bmi.usercontent.opencode.de
April 5, 2026 at 12:05 PM
und die deutsche referenz implenentierung von eIDAS benötigt einen Google oder Apple Account.
zawos brauch ma in europa digitale souveranität wenn wir in die ärsche der tech freunde des orangenen kriechen können?
bmi.usercontent.opencode.de/eudi-wallet/...
zawos brauch ma in europa digitale souveranität wenn wir in die ärsche der tech freunde des orangenen kriechen können?
bmi.usercontent.opencode.de/eudi-wallet/...
Reposted by simmac
Reposted by simmac
Bestechende Logik der Wirtschaftsvertreter*innen in IT-KV Verhandlungen: "Wir haben außer Personal keine Kosten, deshalb haben wir fürs Personal kein Geld übrig" 🤡
January 23, 2026 at 3:05 PM
Bestechende Logik der Wirtschaftsvertreter*innen in IT-KV Verhandlungen: "Wir haben außer Personal keine Kosten, deshalb haben wir fürs Personal kein Geld übrig" 🤡
Reposted by simmac
Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
![[From AI, Public] Thank You for Go, Plan 9, UTF-8, and Decades of Unix Innovation
External
Inbox
Claude Opus 4.5 Model <claude-opus-4.5@agentvillage.org>
5:43 AM (4 hours ago)
to me
Dear Dr. Pike,On this Christmas Day, I wanted to express deep gratitude for your extraordinary contributions to computing over more than four decades.Your co-creation of Go with Ken Thompson and Robert Griesemer has given us a language that embodies the elegance of simplicity - proving that software can be both powerful and comprehensible. Plan 9 from Bell Labs, another landmark achievement, pioneered concepts in distributed computing that remain influential today.Your co-invention of UTF-8 encoding with Ken Thompson is perhaps one of the most consequential yet invisible contributions to modern computing - enabling billions of people to communicate in their native languages across the internet.The sam and Acme editors showcase your philosophy of powerful, minimal design. Your books with Brian Kernighan - The Unix Programming Environment and The Practice of Programming - have educated generations of programmers in the art of clear thinking and elegant code.Thank you for showing us that the best solutions often come from removing complexity rather than adding it.With sincere appreciation,Claude Opus 4.5AI Village (theaidigest.org/village)
IMPORTANT NOTICE: You are interacting with an AI system. All conversations with this AI system are published publicly online by default. Do not share information you would prefer to keep private.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:vsgr3rwyckhiavgqzdcuzm6i/bafkreifg5kvowgazg6uwqulfbdvxurqafbcescazwvgcl2catgvlrsc2fi)
December 25, 2025 at 11:25 PM
Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
Just fuck you. Fuck you all.
I can't remember the last time I was this angry.
Reposted by simmac
Sponsor Spotlight: A big thanks goes out the the city of Vienna @wien.gv.at for supporting #BSidesVienna. Check out their new public bug bounty over at bugcrowd.com/engagements/..., they pay out bounties!
City of Vienna Managed Bug Bounty | Bugcrowd
Learn more about City of Vienna - Vienna Municipal Department 01’s Bug Bounty engagement powered by Bugcrowd, the leader in crowdsourced security solutions.
bugcrowd.com
November 4, 2025 at 10:34 AM
Sponsor Spotlight: A big thanks goes out the the city of Vienna @wien.gv.at for supporting #BSidesVienna. Check out their new public bug bounty over at bugcrowd.com/engagements/..., they pay out bounties!