ISP veteran.
Built up CERT.at.
National and international CSIRT liaison for CERT.at
Private Blog is here: https://lendl.priv.at
| Website | https://lendl.priv.at/ |
I'm not sure I fully agree with the premise of this paper, but the historical review of the LE vs. Encryption debate is really helpful:
I have a hunch @pluralistic would like this video from Norway.
Spring has arrived in central and western Europe, as shown by the sun-shaped hole in the electricity prices for the day.
New blogpost: a look at CIRAS, where ENISA is publishing incident reporting statistics. I’m not a fan.
https://www.cert.at/en/blog/2026/2/incident-reporting-eu-wide-statistics
My piece in The Guardian this morning: Europe’s path to technological independence from the U.S.
I recently gave a long presentation on the topic of lawful access to encrypted data, first during the CSIRTs Network meeting, then at a local security meetup.
I don't want to share the slides, as they heavily depend on the voice track. In order to make the content accessible, I converted it into two posts on the cert.at website:
* Why is this so hard? https://www.cert.at/en/blog/2026/2/lawful-access-to-encrypted-data-why-is-this-so-hard-to-do
* General considerations https://www.cert.at/en/blog/2026/2/lawful-access-to-encrypted-data-general-considerations
Feedback is welcome.
What if vibe-coding tools are this decade's Excel macros?
Allowing people who have no clue about writing sustainable code, to design/create software thus creating the next wave of IT-debt?
New Blogpost.
Lawful access to encrypted data: why is this so hard to do?
https://www.cert.at/en/blog/2026/2/lawful-access-to-encrypted-data-why-is-this-so-hard-to-do
Aphrodite (recharging)
Jaap Burger
TechCrunch
Johnny Ryan
mort