Security research by Dennis Schäfer. Vulnerability research, penetration testing and reverse engineering.https://ds-security.pages.dev/enhttps://ds-security.pages.dev/post/why-raid5-is-risky-in-2025/https://ds-security.pages.dev/post/why-raid5-is-risky-in-2025/Drive capacities kept growing; unrecoverable read error rates did not. The arithmetic behind why a RAID 5 rebuild on modern disks is a bet you may lose.Sun, 26 Jan 2025 00:00:00 GMThttps://ds-security.pages.dev/post/veeam-ransomware-detection-features/https://ds-security.pages.dev/post/veeam-ransomware-detection-features/A look inside VEEAM Backup Service's defences against ransomware: inline encryption detection, the incident API, and what they realistically catch.Fri, 14 Jun 2024 00:00:00 GMThttps://ds-security.pages.dev/post/xml_external_entity_injection_magic_xpi/https://ds-security.pages.dev/post/xml_external_entity_injection_magic_xpi/An XML External Entity injection in the Magic xpi Integration Platform, found during an assessment: path disclosure, outbound connections, and the road to CVE-2023-52239.Thu, 28 Dec 2023 00:00:00 GMThttps://ds-security.pages.dev/post/wifi-camera-security-analysis/https://ds-security.pages.dev/post/wifi-camera-security-analysis/Teardown and firmware analysis of a consumer WiFi camera: exposed services, the WLAN key stored in plaintext, and an admin password baked into the mobile app.Mon, 11 Dec 2023 00:00:00 GMThttps://ds-security.pages.dev/post/stop-using-jwts-for-sessions/https://ds-security.pages.dev/post/stop-using-jwts-for-sessions/Single-page applications reach for JSON Web Tokens by default. For session handling that is usually the wrong trade. Here is what it costs you.Sat, 25 Nov 2023 00:00:00 GMThttps://ds-security.pages.dev/post/integer-overflow-in-7-zip-cve-2023-31102/https://ds-security.pages.dev/post/integer-overflow-in-7-zip-cve-2023-31102/An integer underflow in 7-Zip's PPMd codec, surfaced by a week of AFL++ coverage-guided fuzzing. How the bug works, and why reaching it is harder than it looks.Fri, 17 Nov 2023 00:00:00 GMThttps://ds-security.pages.dev/post/photovideo-locker-calculator-leak-of-sensitive-files/https://ds-security.pages.dev/post/photovideo-locker-calculator-leak-of-sensitive-files/An Android app disguised as a calculator promised to lock away your photos. It left them readable on external storage. Two CVEs and a look at the disclosure.Thu, 16 Nov 2017 00:00:00 GMThttps://ds-security.pages.dev/post/wireshark-plugins-in-c-and-lua-performance-comparison/https://ds-security.pages.dev/post/wireshark-plugins-in-c-and-lua-performance-comparison/Wireshark dissectors can be written in C or in Lua. We benchmarked both across compiler optimisation levels to find out what the convenience actually costs.Wed, 17 Aug 2016 00:00:00 GMThttps://ds-security.pages.dev/post/updating-thinkpad-uefi-under-linux/https://ds-security.pages.dev/post/updating-thinkpad-uefi-under-linux/Lenovo ships firmware updates as bootable Windows images. Getting a UEFI update onto a ThinkPad from a Linux-only machine, step by step.Wed, 23 Mar 2016 00:00:00 GMT