Brian (@BadgeWizard) header
Brian (@BadgeWizard) profile picture

Brian

@BadgeWizard

Security Researcher, Hacker. Breaking new stuff, voiding warranties and finding out how things work!

security-bits.de
Joined March 2013
  • Tweets2.6K
  • Following381
  • Followers1.5K
539Media
Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)Photo by Brian (@BadgeWizard)
Lunchbreak Todos: I've decided to share my CRA checklist I created a few months back as small browser / webapp. And, yes, I did the writing and reading myself, its not AI slop. security-bits.de/cra
3
165
A few notes on my local AI setup based on a AMD Ryzen AI Max+ 395 with 128GB of shared memory. security-bits.de/posts/2026-…

Tiny Private AI Setup

A while back I bought myself a little box based on a AMD Ryzen AI Max+ 395 with 128GB of shared memory. The reason, simple, running a few local LLMs to process data I don’t want to share with...

security-bits.de
3
1
3
249
Can we have tiny patches? security-bits.de/posts/2026-…

Why we can’t patch even though we want to patch and could patch – …

As probably so many of you, I’m currently in various discussions on the dawn of vulnerabilities discovered by AI. While the topic isn’t new, the dimensions very well might. Here a few thoughts.

security-bits.de
2
95
Time to go Vibe-*Drinking? Probably! AI is taking over more and more tasks, in partially replacing humans, partially augmenting them. Sometimes we have a form of Human Washing, where a real person just hides the fact something is solely running on AI... security-bits.de/posts/2026-…

Vibe Supporting, Vibe Operations and Human Washing - Vibe-* Drinking?

AI is moving forward quickly, making life easier for the one and harder for the others. “Vibe Coding” was established in 2025 as one of the terms in this context, thus lets take the “Vibe” term a …

security-bits.de
100
A few short notes on why "Products [...] placed on the market before 11 December 2027 shall be subject to [...] this Regulation only if, from that date, those products are subject to a substantial modification." might give a false sense of safety. :) security-bits.de/posts/2026-…

CRA’s View on “The Product” and Placing it on the Market

The Cyber Resilience Act contains various chapters referring to products and when they were placed on the market. Here is a short insight into a tiny little pitfall that makes a big difference: The …

security-bits.de
63
Got some post yesterday, Binary Risk Assessment as defined on binary.protect.io/ as a card game. According to the underlying git I've been thinking about this since 2024 :-/ . Few changes, then reprint, then ready to share! :)
Image from Brian (@BadgeWizard)
Image from Brian (@BadgeWizard)
Image from Brian (@BadgeWizard)
Image from Brian (@BadgeWizard)
1
1
7
303
Performing Red Teaming? Require Physical access or working on a Social Engineering gig? Need a matching company ID card? Then let's talk and print one :) security-bits.de/posts/2025-…

Need a New ID?

IDs no matter if government or company issued, for fun or a club, have both crucial but also symbolic roles. Allowing access in many different ways, having an ID can be vital for both work and …

security-bits.de
1
74
Needing a deeper insight into the EU AI act and the classification as an AI system, I wrote a few notes... Sadly a lot of buzzwords. Does a ChatBot "talking" to me influence any environments? I'd say no, as its me doing the influencing, but.. Any thoughts? security-bits.de/posts/2025-…

What are AI Systems?

Currently needing some deeper insights into LLMs, what they do and especially how they do it, I decided to write down a few lines, which I hope might be helpful. The post is mainly focused on, well, …

security-bits.de
1
81
Ever had your FortiVPN Client offering you an incorrect eMail address during SSO? Maybe even a russian one? I might very well just have been a bug in the WebView ... security-bits.de/posts/2025-…

A not so Compromised FortiVPN Client

Just having lost about a week debugging a potentially major issue, I’ve decided to share a few insights, to potentially save others the time I, we, just wasted: FortiVPN Auth with SSO shows a strange...

security-bits.de
2
180
Colour coding for the colour blind
Image from Brian (@BadgeWizard)
128
Analysed a bunch of firmware utilizing @binarly_io and got a long list of issues, even longer than expected. But how significant is a long list? Shouldn't the question be: How well is the device maintained? A few thoughts on the topic! security-bits.de/posts/2025-…
Image from Brian (@BadgeWizard)
2
8
2
14
4,452
Does anyone have a nice contact @googlemaps ? I would like to understand how I can place a complaint concerning a company cleaning their ratings. I've had 5 complaints against my comment. Google accepts my objection, and then a few days later the same complaint comes again ...
185
Seems I have a functioning OLT
Image from Brian (@BadgeWizard)
145
!!!
offensivecon (@offensive_con) profile pictureoffensivecon
@offensive_con14 Jan 2025
…
176
Overkill home network? How I got there and why :) security-bits.de/posts/2025-…

Overkill Home Network

I’m often told my home network is typical me and far to complex. For me it’s just as complex as necessary, as I honestly don’t have very much time to invest. Here a few notes on how I got here and why

security-bits.de
2
4
188
Nearly there. Just one more "night" until @h2hconference
Image from Brian (@BadgeWizard)
2
181
Printing cards and IDs during @h2hconference more details here: security-bits.de/posts/2024-…

Custom Cards & IDs @H2HC

As already mentioned on various channels, I brought a fun little card printer with me to this year’s

security-bits.de
5
11
1,292
Honestly not sure whether it's a bad sign when the driver puts on his seat belt after the first half of the trip
150
I'll be bringing a card printer and CR80 (85.6mm x 54mm) cards to @h2hconference. Full Duplex, 600DPI. Should you need anything printed (1..5..20 cards), drop me a message, just want to make sure I have enough ink on me
2
6
15
2,137
Preparing for @h2hconference security-bits.de/hackerid/

Hacker ID Card

Hacker ID Card? The HackerIDCard is a fun approach to both a reusable name tag and a “business card” or rather collection of quick links. The front shows both your picture and handle or …

security-bits.de
2
5
17
2,043

No more items