iiinova — where your digital self keeps evolving

Pascal Gujer @evilmaid.bsky.social · 26/09/2026

🔓 Breaking BitLocker at Black Hat Europe still needs a few more early registrations to happen. If TPM sniffing, hardware hacking & BitLocker attacks are on your list: now is the time. There may be no later. Help us get around the workbench! 🔬 👉 hos.direct/bheu26

Black Hat training badge, Because reading the advisor. isn‘t the same as running the drill

Soldering to the SPI bus inside a disassembled notebook

a notebook standing sideways with a logic analyzer connected to its interior. a second notebook showing the recorded traces in dsview / pulseview

classroom setup woth desks cluttered with hardware, open notebooks and led magnifier glasses

021

Pascal Gujer @evilmaid.bsky.social · 16/09/2026

🔓 BitLocker enabled. No recovery key. Now what? **Breaking BitLocker** is back in Zürich 🇨🇭 TPM sniffing • DMA • BitPixie + newer attacks • real hardware • fully hands-on. 📅 22–23 Oct 🧰 Hardware kit included 👉 hos.direct/oct26training Also at Black Hat Europe 🇬🇧 👉 hos.direct/bheu26

011

Pascal Gujer @evilmaid.bsky.social · 03/06/2026

Shadow AI is the new Shadow IT. Employees don't use ChatGPT or Claude to bypass policy. They use them because there is no useful approved alternative. Every Shadow AI incident is also a review of your AI strategy. 👇 More thoughts and an example in the comments. #ShadowAI #CyberSecurity #AI

210

Pascal Gujer @evilmaid.bsky.social · 23/05/2026

Dad cheat code 🔥 Sous-vide the meat first. Then quick finish on the grill. Almost zero stress. Absolute steakhouse-quality every time 😄 Get yours here 👉 s.click.aliexpress.com/e/_EQNPDai #DadHack #SousVide #LegendDad

000

Pascal Gujer @evilmaid.bsky.social · 21/05/2026

Fighting cybercrime is a team sport. Cybercriminals collaborate globally. Defenders must do the same. Today’s Europol operation is another strong example of what international cooperation can achieve. 👏 Europol: www.europol.europa.eu/media-press/... Operation Saffron: operation-saffron.eu

operation-saffron.eu

First VPN Service — Website Seized by Law Enforcement

⚖ This Service Has Been Seized ⚖

021

Pascal Gujer @evilmaid.bsky.social · 16/05/2026

Dad Hack 🔥 Stop building smoky teepee fires 😄 Stack wood in layers + add a tiny blower = cheat-code campfire. Less smoke. Less wood. Less chemicals. Better fire. (Blower link 👉 s.click.aliexpress.com/e/_EvfC9JU) #DadHack #LegendDad #Camping

020

Pascal Gujer @evilmaid.bsky.social · 11/05/2026

AI gives you great content. Then you spend 20 minutes fixing Word formatting. 😩 So I built Markdown to Word Standalone: Offline tool → AI Markdown → proper corporate .docx No install. No upload. No backend. Src: 👉 github.com/pascal-gujer... Try it out: 👉 pascal-gujer.github.io/markdown-to-...

000

Pascal Gujer @evilmaid.bsky.social · 09/05/2026

After 100+ hours using Codex + Claude in authorized vuln research: -> Codex had cyber research approval, yet steered me away from a high-severity finding. -> Claude, without a special program, immediately flagged it as critical. I wonder whether that cyber research approval was just to get my ID?

000

Pascal Gujer @evilmaid.bsky.social · 06/05/2026

🇨🇭 ÖV-Lifehack für Schweizer: 3 % Rabatt auf SBB-/ZVV-Abos via Coop + Reka 😄 Bei Familien summiert sich das schneller als man denkt. Wie mein Urgrossvater schon sagte: „Wer den Rappen nicht ehrt ist des Frankens nicht wert.“ 💸

000

Pascal Gujer @evilmaid.bsky.social · 04/05/2026

Quick win for parents 💡 Set DNS to 1.1.1.3 / 1.0.0.3 Blocks malware + adult content. Not perfect—but fewer “oops moments”. #LegendDad @pascal_gujer

000

Pascal Gujer @evilmaid.bsky.social · 01/05/2026

“face comparison, fully local — just a browser.” like cyberchef, but for faces. built in ~3h. single HTML, no backend, no network. pascal-gujer.github.io/facetrace-st...

010

Pascal Gujer @evilmaid.bsky.social · 30/04/2026

🚨 Copy Fail (CVE-2026-31431) Linux kernel LPE → page cache corruption → overwrite binaries → root. Public PoC dropped ~24h ago. Tested: ✔ Ubuntu 24.04 / 25.10 (x86_64 + ARM64) If you get code execution → you get root. PoC: github.com/pascal-gujer... #linux #infosec

021

Pascal Gujer @evilmaid.bsky.social · 29/04/2026

Stop typing your password in Terminal. Use Touch ID for sudo 👇 👉 sudo nano /etc/pam.d/sudo Add this line at the very top: auth sufficient pam_tid.so Done. Next time you run sudo, just touch the sensor.✨ Small change — but one of those things you’ll use every single day once it’s there.

000

Pascal Gujer @evilmaid.bsky.social · 28/04/2026

Turned Codex from a kid I had to babysit… into an apprentice that gets work done. Stop babysitting it. → github.com/pascal-gujer...

001

Pascal Gujer @evilmaid.bsky.social · 25/04/2026

🎙️ VoiceInk is a gamechanger. Open source, local/offline AI, no subscription — and finally a voice workflow that lets you structure thoughts before sending them to AI. Way better prompts. Way better output. Go test it:

000

Pascal Gujer @evilmaid.bsky.social · 24/04/2026

Phone snatching isn’t just about losing hardware anymore. Your banking, passkeys & digital life are on that device. I made a simple iPhone automation: 🔒 Lock screen when Bluetooth disconnects. ➡️ www.icloud.com/shortcuts/23... 🏋 Also great against snatch-and-run theft: ➡️ hos.direct/y8v1n

211

Pascal Gujer @evilmaid.bsky.social · 23/04/2026

Dad Hack 🔋 Loose batteries + kids = bad combo. Fire risk, leaking cells, swallowed button batteries… So I got a proper Inobat battery recycling barrel for home 🇨🇭 And of course a DIY Battery storage solution with a custom laser cut drawer... 😇 🛢️ www.inobat.ch/de/info-verb... #DadHack #legenddad

000

Reposted by Pascal Gujer

Mänu @emanuelduss.ch · 31/01/2026

This was a really cool and awesome course ❤️! I learned so much in these two days and did a lot of stuff I never did and never heard about before. It was cool when (after some nasty debugging 🫠) the encryption key could finally be sniffed 🤘. Thanks a lot for your training, you guys rock!

Open notebook from the backside where the mainboard can be seen, tiny wires are soldered on the SPI flash. These are soldered to a PCB which is connected to a logic analyzer.

062

Pascal Gujer @evilmaid.bsky.social · 29/01/2026

We’re doing it again! No, not the fancy coffee corner — the famous “Breaking BitLocker” training you know from @BlackHatEvents is happening right now in Zurich 🇨🇭 Can’t wait to see the joy in the participants’ eyes when that key pops up tomorrow 🔑

110

Pascal Gujer @evilmaid.bsky.social · 13/11/2025

We just launched our YouTube channel! First Video: 60-seconds on how TPM sniffing breaks BitLocker — one of three real attacks trained at our Breaking BitLocker training Zurich, 29–30 January 2026 More hardware security content is coming soon. Subscribe & stay tuned: 🎥 youtube.com/@hands-on-se...

youtube.com

Hands-On Security

Hands-On Security delivers practical cybersecurity training with a focus on hardware, firmware, and physical access attacks. Our flagship course “Breaking BitLocker” teaches real-world techniques…

000

Pascal Gujer @evilmaid.bsky.social · 20/10/2025

🧠 BREAKING BITLOCKER — Early bird CHF 2999 until Nov 3. Seasoned BHUSA course (3 yrs) back in Zurich, 29–30 Jan 2026. Hands-on: TPM sniffing, DMA, bootloader patching, micro-soldering & RAM key extraction. Open to all professionals — especially valuable for LEA & forensics. hos.direct/jan26training

031

Pascal Gujer @evilmaid.bsky.social · 20/10/2025

“Putting all eggs in one basket and all baskets on the Titanic.” - @stefanfrei.bsky.social 🧺🚢 When AWS goes down and takes half the internet with it, maybe it’s time to rethink our basket strategy. Reuters report: www.reuters.com/business/ret... AWS status page: health.aws.amazon.com #AWSOutage

054

Pascal Gujer @evilmaid.bsky.social · 19/09/2025

✈️ Waiting for a flight → todo list created and stuff done ✅ Used ChatGPT to pull all unfinished projects from our past chats. Clear head & new focus. ➡️ Stop doomscrolling in downtime. Try: 🔥 “Go through our past chats and create a todo list with all the projects and unfinished tasks we discussed”

000

Pascal Gujer @evilmaid.bsky.social · 19/07/2025

🔑 International BitLocker Recovery Key Day – July 19th! One year ago, many learned the hard way: No offline backup = Locked out! Don’t get caught off guard – backup your BitLocker keys now! 💡 Quick tip: manage-bde -protectors -get C: #BitLockerDay #CyberSecurity #Encryption #DataProtection

032

Pascal Gujer @evilmaid.bsky.social · 21/06/2025

Got asked for tick tweezers while out fishing. ✅ My Care Plus kit had everything. 🎯 Remove slow, no twist, disinfect. 💡 Info: zecken-stich.ch/wie-wird-ein... 🎒 Kit: www.careplus-shop.de/first-aid-ki... As a dad, you’re the one they rely on. #DadHack #legendad #legenddad

000

Pascal Gujer @evilmaid.bsky.social · 12/06/2025

🚨 Breaking 🚨 Our 2nd Breaking BitLocker session at Black Hat got cut. Only 3 seats left for the Aug 2–3 run. 🔥 Hands-on. Gritty. Soldering scars? likely. 🎟️ hos.direct/bhusa25-23aug 🇨🇭 No Vegas? Zurich pre-run: hos.direct/jun25training #BlackHat #CyberTraining #BitLocker

100

Pascal Gujer @evilmaid.bsky.social · 09/06/2025

Got a flat on the kid trailer. Not just the tube - tyre was toast too. 😬 Swapped it and used my go-to fix: the Xiaomi Portable Compressor. 🛠 Precise ♻️ Reusable 🚗 Lives in the car Way better than CO₂ if you’ve got kids in tow. 🔗 amzn.to/45eSolC #ad #DadHack #BikeLife #Xiaomi #legendad #legenddad

000

Pascal Gujer @evilmaid.bsky.social · 04/06/2025

Spent half a day chasing ghosts on the CAN bus. Logic analyzer showed traffic, but the system was dead silent. Turns out I forgot the termination resistor — the one thing I was told to check first. Lesson: don’t skip the basics. 🧌🔧 #CANbus #DebuggingFails #ElectronicsLife

220

Pascal Gujer @evilmaid.bsky.social · 01/06/2025

Forgot the grill tongs at a Swiss Grillplatz. So I built some — 2 sticks + fishing line = DIY spring-loaded BBQ tongs. Dad Level: 💪 #legendad #legenddad Full story here: www.linkedin.com/posts/pascal... #LifeHack #DadHack #DIY

000

Pascal Gujer @evilmaid.bsky.social · 26/05/2025

Most people wait. For clarity. For courage. For the “right” time. But the truth? You'll rarely feel ready. Movement brings clarity. Not the other way around. That first step changes everything. 🚀 Ready to move? → Vegas Aug 4-5 hos.direct/bhusa25-45aug → Zurich Jun 26-27 hos.direct/jun25training

000

Pascal Gujer @evilmaid.bsky.social · 24/05/2025

🔧 Dad Hack: Fixing Broken Plastic Parts! Unleash the secret combo: super glue + baking soda! 🪄 🛠️ drill, key files 😇, precision drivers, super glue, baking soda, plastic wrap 🔁 glue → sprinkle soda → repeat → file/shape ✅ Done! Hard as stone! What’s your go-to repair trick? 💬 #legendad

032

Pascal Gujer @evilmaid.bsky.social · 22/05/2025

🔐 Break BitLocker with real tools — not slides. Black Hat USA training, >50% booked. Early bird ends May 23, 11:59 PM PDT. You’ll: 🧠 Learn BitLocker internals 📡 Sniff keys 🥾 Attack Bootloader 💻 Take home a hacked test laptop + logic analyzer 👉 hos.direct/bhusa25-23aug 👉 hos.direct/bhusa25-45aug

010

Pascal Gujer @evilmaid.bsky.social · 20/05/2025

Don’t wait for the wind to change – set your sail. 🚩 At 14, I dreamt of attending #BlackHatUSA. Today, I’m not just attending – I’m an invited trainer. Years of passion, perseverance, and hacking led here. Curious about the full story? ;) @blackhatevents.bsky.social hos.direct/kjtyv

hos.direct

#bitlocker #bhusa #third #trainer #goals #attract #like #magnets… | Pascal G.

*Don’t Wait for the Wind to Change – Set Your Sail: My Journey to Becoming a Black Hat Trainer* At 14, I read The Art of Intrusion by Kevin Mitnick and first heard about Black Hat and DEF CON. Fasci...

110

Pascal Gujer @evilmaid.bsky.social · 17/05/2025

“Why do you always carry a knife?” My great-grandfather told my grandfather, who told my dad, who told me: “A real man always carries a knife.” Today, I used mine to turn a normal bottle into a spill-proof straw bottle. Dad Level achieved What’s your best dad hack? #LifeHacks #legenddad #legendad

100

Pascal Gujer @evilmaid.bsky.social · 15/05/2025

🔓 Bitpixie is Back! Bypass BitLocker in under 5 minutes - no screwdriver needed. Thomas Lambertz’s talk at 38C3 showed how. 🚀 Join our Breaking BitLocker trainings: • Zurich: hos.direct/jun25training • BH USA: hos.direct/bhusa25-23aug / hos.direct/bhusa25-45aug ⏰ Early bird ends in 8 days!

031

Pascal Gujer @evilmaid.bsky.social · 14/05/2025

🚀 Cybersecurity Training – Feeling lost? Before every training, I always wonder: 💭“Am I skilled enough?” Turns out, many of us feel the same! With Breaking BitLocker, we make it easy – from 0 to hero with minimal prerequisites. Got a funny training story? Let’s hear it! #CyberSecurity #Training

011

Pascal Gujer @evilmaid.bsky.social · 13/05/2025

🚀LocalSend: The Open-Source AirDrop Alternative! Transfer files over WiFi without internet! Works on Windows, macOS, Linux, Android & iOS. 💡Perfect for travel, meetings, or quick file swaps at home. No cables needed! localsend.org/de/download github.com/localsend/lo... #OpenSource #FileSharing

040

Pascal Gujer @evilmaid.bsky.social · 12/05/2025

🚨 Our first Breaking BitLocker training at Black Hat USA 2025 is 30% SOLD OUT – weeks before early bird ends! Learn to break TPM-only BitLocker with real hardware & hands-on techniques. Don’t wait – spots are flying! Aug 2&3: hos.direct/bhusa25-23aug Aug 4&5: hos.direct/bhusa25-45aug #BHUSA

001

Pascal Gujer @evilmaid.bsky.social · 25/04/2025

“0-day” LPE - but only works if you know the password? That’s not a vuln. That’s literally a feature. Tired of seeing this stuff blindly reposted by folks who can’t tell access control from exploit. We need fewer click-chasers, more professionals.

101

Pascal Gujer @evilmaid.bsky.social · 17/04/2025

Easter food for thought 🐣 What if BitLocker isn’t as secure as you think? We show 3 real-world attacks + mitigations at @blackhatevents.bsky.social #BHUSA 2025. 🧰 TPM sniffing, DMA, BitPixie. 🛠️ All hands-on. Hardware kit included. 🇺🇸 hos.direct/bhusa25-45aug 🇺🇸 hos.direct/bhusa25-23aug

010

Pascal Gujer @evilmaid.bsky.social · 28/03/2025

🚀 Did you know? You can use Touch ID for sudo on macOS - no more password typing in Terminal 🔐 Just add this at the top of /etc/pam.d/sudo: ` auth sufficient pam_tid.so` Next time you run sudo, you’ll get a fingerprint prompt. That's how sudo should feel in 2025. #macOS #TerminalTips #DevHacks

000

Pascal Gujer @evilmaid.bsky.social · 24/03/2025

Next.js CVE-2025-29927: Getting far less attention than the alleged ESP backdoor - but far more dangerous. A single HTTP header can bypass auth. Remote exploitable, public PoCs out! Patch now. Don’t wait. PoC: github.com/aydinnyunus/CVE-2025-29927 #CyberSec #NextJS #CVE #infosec

github.com

GitHub - aydinnyunus/CVE-2025-29927: CVE-2025-29927 Proof of Concept

CVE-2025-29927 Proof of Concept. Contribute to aydinnyunus/CVE-2025-29927 development by creating an account on GitHub.

030

Pascal Gujer @evilmaid.bsky.social · 24/03/2025

O2 built an AI granny 👵🏼 named Daisy who traps scammers in 40-minute chats about cats and knitting—just to waste their time. In a cybercrime war where outlaws outnumber the good guys, smart ideas like this are our secret weapon. Time to fight smart.

youtu.be

Your browser is up to date

You can use YouTube's latest features!

131

Pascal Gujer @evilmaid.bsky.social · 23/03/2025

🌍 Tired of slow hotel WiFi & captive portals? I never travel without my GL.iNet Slate AX (AX1800): ✅ Bridges public WiFi & runs WireGuard VPN ✅ Supports USB tethering (iOS & Android) ✅ Blocks ads with AdGuard Home ✅ Has a super fast interface—no waiting, just works 🔥 Get yours: amzn.to/41BJ5IY

010

Pascal Gujer @evilmaid.bsky.social · 22/03/2025

I’ve been using ByteSIM eSIM's while traveling and it’s a game-changer! 🚀 Very cheap and their app lets me easily move the eSIM to another device when not in use - no wasted data, no endless calls with support. Know a cheaper option? Let me know! 👇 Meanwhile get 5% off here:

shln.top

ByteSIM eSIM | International eSIM plans for travel abroad

Buy online an international travel eSIM and save roaming fees when you travel. It is fast and easy. ByteSIM is the best rated eSIM shop.

021

Pascal Gujer @evilmaid.bsky.social · 13/03/2025

Keeping up with different platforms is exhausting. Who else feels this? I’m trying out @buffer to stay connected across X, LinkedIn, and here. Not sure if it’s perfect yet, but let’s see how it goes! How do you stay active on multiple platforms without losing your mind? Let’s talk strategies!

000

Pascal Gujer @evilmaid.bsky.social · 23/01/2025

🎉 On January 30 & 31 we will hold our first “Defeating Microsoft’s Default BitLocker Implementation” training session of 2025 in Zurich! Dive into the program featured at Black Hat USA 2023 & 2024 and explore hardware hacking. Limited seats are still available! hands-on-security.com/documents/20...

000

Reposted by Pascal Gujer

jiska @naehrdine.bsky.social · 17/11/2024

How does the new iOS inactivity reboot work? What does it protect from? I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented. naehrdine.blogspot.com/2024/11/reve...

naehrdine.blogspot.com

Reverse Engineering iOS 18 Inactivity Reboot

Wireless and firmware hacking, PhD life, Technology

12277106