#hacklu — Public Fediverse posts

hack.lu is celebrating its 20th edition!

There is still time to be part of this special anniversary edition: submit your talk, presentation, workshop, or even a short talk for the Call For Failures.

Twenty editions of sharing, learning and community deserve something memorable. Don’t miss the chance to contribute, this year will be special!

Call-for-Papers Submission Site https://pretalx.com/hack-lu-2026/

CfP Details https://2026.hack.lu/blog/hack.lu-2026-call-for-papers/

#hacklu #conference #luxembourg #cybersecurity #hackerconf #cfp #callforpapers #europe

@hack_lu @circl

hack.lu is celebrating its 20th edition!

There is still time to be part of this special anniversary edition: submit your talk, presentation, workshop, or even a short talk for the Call For Failures.

Twenty editions of sharing, learning and community deserve something memorable. Don’t miss the chance to contribute, this year will be special!

Call-for-Papers Submission Site https://pretalx.com/hack-lu-2026/

CfP Details https://2026.hack.lu/blog/hack.lu-2026-call-for-papers/

#hacklu #conference #luxembourg #cybersecurity #hackerconf #cfp #callforpapers #europe

@hack_lu @circl

#HackLu has opened their #CfP. There is a vast list of topics of interest, thus opening the floor to researchers of various #cybersecurity, #threatintel and #internetmeasurement disciplines. Much of their work has a European, or even global impact. These folks are a bunch of great minds working passionately for the better good of the #Internet.

Find the announcement here :)

Cheers!

#CIRCL #Luxemburg #EU #Europe #Infosec

#HackLu has opened their #CfP. There is a vast list of topics of interest, thus opening the floor to researchers of various #cybersecurity, #threatintel and #internetmeasurement disciplines. Much of their work has a European, or even global impact. These folks are a bunch of great minds working passionately for the better good of the #Internet.

Find the announcement here :)

Cheers!

#CIRCL #Luxemburg #EU #Europe #Infosec

Misc story time:
tldr: I've been collecting security conference stickers for 20+ years and just now got around to using them ¯\_(ツ)_/¯

I'm not the kind of person to put stickers on my laptop. This means that for 23 years (apparently), when I got stickers from a conference, I kept them, put them in a bag, moved them from house-to-house, but never actually did anything with them. Until now.

I finally found a usage; which is decorating the otherwise-sketchy-looking metal ammo case which @VeronicaKovah & I are now using to carry phones with us to trainings. We watched some videos on youtube that make it seem like those LiPo fire-protection bags would do a whole lot of not-much in the event that a fire broke out on one of the batteries. But a simple metal box seemed to do a lot better in terms of containing the flames.

So we of course expect that airport security will always stop us when traveling with them (though at least this time our TSA pre-check status seemed to give us a pass on the way out). But the expectation is that contrary to what you might thing, adding hacking conference stickers will actually be disarming, rather than alarming, with security personnel - at least when compared to the alternative of seeing a raw ammo canister ;)

The oldest sticker seems to be from DEF CON 10 (X), circa 2002 (my first DEF CON was 8 FWIW). In general I don't seek out stickers, but I do think the BadBIOS and "I want to believe" ones are things I probably got from Joe Fitz as they were of-the-moment and relevant to my interests. (If you're not familiar with the latter, it's from a very FUDish cover article [1]). I could have completely filled them, but I left a little bit of space for the future. Check out the larger pics for a potential stroll down memory lane. (RIP Shmoocon, Hackademic.info, NoSuchCon. Memento mori conference organizers ;))

#DEFCON, #BlackHat, #ShmooCon, #BlueHat, #RingZer0, #HackLU, #HardwearIO, #DistrictCon, #HackFest, #NoSuchCon, #DeepSec, #HITB, #HackersOnTheHill

[1] https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies

Misc story time:
tldr: I've been collecting security conference stickers for 20+ years and just now got around to using them ¯\_(ツ)_/¯

I'm not the kind of person to put stickers on my laptop. This means that for 23 years (apparently), when I got stickers from a conference, I kept them, put them in a bag, moved them from house-to-house, but never actually did anything with them. Until now.

I finally found a usage; which is decorating the otherwise-sketchy-looking metal ammo case which @VeronicaKovah & I are now using to carry phones with us to trainings. We watched some videos on youtube that make it seem like those LiPo fire-protection bags would do a whole lot of not-much in the event that a fire broke out on one of the batteries. But a simple metal box seemed to do a lot better in terms of containing the flames.

So we of course expect that airport security will always stop us when traveling with them (though at least this time our TSA pre-check status seemed to give us a pass on the way out). But the expectation is that contrary to what you might thing, adding hacking conference stickers will actually be disarming, rather than alarming, with security personnel - at least when compared to the alternative of seeing a raw ammo canister ;)

The oldest sticker seems to be from DEF CON 10 (X), circa 2002 (my first DEF CON was 8 FWIW). In general I don't seek out stickers, but I do think the BadBIOS and "I want to believe" ones are things I probably got from Joe Fitz as they were of-the-moment and relevant to my interests. (If you're not familiar with the latter, it's from a very FUDish cover article [1]). I could have completely filled them, but I left a little bit of space for the future. Check out the larger pics for a potential stroll down memory lane. (RIP Shmoocon, Hackademic.info, NoSuchCon. Memento mori conference organizers ;))

#DEFCON, #BlackHat, #ShmooCon, #BlueHat, #RingZer0, #HackLU, #HardwearIO, #DistrictCon, #HackFest, #NoSuchCon, #DeepSec, #HITB, #HackersOnTheHill

[1] https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies

@hack_lu
Revisiting Widevine L3: DRM As A Playground For Hackers - Felipe Custodio Romero
https://youtu.be/T3Xo4C6vIto
#HackLu

Last week at hack.lu I gave a presentation about "How to better identify (weaponized) file formats":

- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed, or make mistakes?
- How can we do better?

You can now see it here: https://youtu.be/Qp5GDh2sj6A

#HackLu

Last week at hack.lu I gave a presentation about "How to better identify (weaponized) file formats":

- Why do we need to identify file formats accurately?
- Why can the current tools (libmagic, magika) sometimes be bypassed, or make mistakes?
- How can we do better?

You can now see it here: https://youtu.be/Qp5GDh2sj6A

#HackLu

@hack_lu How To Better Identify (Weaponized) File Formats With Ftguess - Philippe Lagadec
https://youtu.be/Qp5GDh2sj6A
#HackLu

@hack_lu French Stealer Ecosystem: The Resurgence Skid Gangs In Cybercrime Space - 0xSeeker
https://youtu.be/-3dF0zWtO_o
#HackLu

RE: https://infosec.exchange/@ministraitor/115430049959447776

This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.

#hacklu #cybersecurity #certificate #threatintel

RE: https://infosec.exchange/@ministraitor/115430049959447776

This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.

#hacklu #cybersecurity #certificate #threatintel

Thank you @hack_lu... again.
I love these days in Lëtzebuerg.
Hope to join again next year. 🤞
#HackLu
#hacklu2026

@hack_lu CLI Ambush - William Robinet
https://youtu.be/2ogJ6LkvNGw
#HackLu

@hack_lu Beyond Post-quantum Stereotypes - Antoine Gicquel & Benjamin Sepe
https://youtu.be/WqFrNRgBpEM
#HackLu

@hack_lu DCOM Turns 20: Revisiting A Legacy Interface In The Modern Threatscape - Julien Bedel
https://youtu.be/QSOjcQzLMA0
#HackLu

@hack_lu Automotive Security Analyzer For Exploitability Risks: An Automated And Attack Graph-Based Evaluation Of On-Board Networks - Martin Salfer
https://youtu.be/LseD22_ph78
#HackLu

Lightning Talk:
Revisiting RAND’s Lost Monte Carlo Simulations: Sharla Perrine, Paul Baran, And The True Business Case For The Internet - Trey Darley
https://youtu.be/FCdEhYVHvzw
#HackLu @hack_lu

Lightning Talk:
Threat Actor Tripping On The Finish Line - Rasmus
https://youtu.be/YXfTAXtSQYE
#HackLu @hack_lu

Lightning Talk:
Pwn2Own: Hacking IoT Devices - Adam
https://youtu.be/eESkBe0kOKw
#HackLu @hack_lu

Lightning Talk:
4-Byte Hell: When Unicode Enters The Stage - Jonas Hess
https://youtu.be/IJ0C1lEz-S0
#HackLu @hack_lu

Lightning Talk:
Reverse Engineering, For Real - Henri Ahola
https://youtu.be/TQUVg_XHC38
#HackLu @hack_lu

Lightning Talk:
Bugs In The Human Code: Help Timo - Paul Hirtz
https://youtu.be/ITkT05McR6E
#HackLu @hack_lu

Lightning Talk:
Fake Likes, Real Risks: Mapping Fake Social Activity Shops in Europe - Sviatlana Höhn & Anastasia "Asya" Sergeeva
https://youtu.be/BHhk0tdAdXY
#HackLu

Best Paper Award
https://youtu.be/2VlvIWedKDE
#HackLu @hack_lu

CTF Challenge Prize
https://youtu.be/ARGWj2-zDY0
#HackLu @hack_lu

@hack_lu Exploiting Legit APIs For Covert C2: A New Perspective On Cloud-based Malware Operations - Cocomelonc
https://youtu.be/l2G2TZvzj0E
#HackLu

This picture is titled "I'm a professional social media influencer" :)
#hacklu #hacklu2025

The Russian underground has ads for “arson” “surveillance” and more types of #hybridwarfare capabilities.

It seems there’s some (not unexpected, not the first time) connection between Russians Gov and the underground…

#hacklu #hacklu2025

Next up is another #hacklu “frequent flyer” Vladimir Kropotov with “Russian speaking underground- changes in the risks, attack surface and modus operandi”

At #hacklu2025

Vulnerability Lookup and GCVE: A Decentralized Approach to Vulnerability Publishing and Management Workshop at Hack.lu 2025

We published all the materials from the workshop given at #hacklu 2025

#gcve #vulnerabilitymanagement #opensource #cybersecurity #cve

🔗 https://www.vulnerability-lookup.org/2025/10/24/workshop-at-hack-lu-2025/

@circl @gcve