news

Oct 15, 2026 Patrick Stoeckle and I presented our paper “Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source” at ASE 2026 in Munich. Jessica Hösl, our thesis student, was the main author of the paper. The paper presents an automated pipeline that analyzed 11,470 Dockerfiles from inner source repositories at Siemens AG. It shows that adopting existing internal reference implementations could improve security posture by 60.4%.
Oct 09, 2026 I’ve achieved the GIAC Certified Machine Learning Engineer (GMLE) certification! This time, I took the in-person exam at a testing center. Much better than the online proctored exams with webcams. 🤜 🤛
Apr 19, 2026 🇪🇺 Proudly using European Mistral now! Switched from Claude/Copilot → not disappointed! Vibe CLI is amazing, even if a bit rough without an extension. 🚀
Aug 28, 2025 Ditching Spotify - Using GDPR Data Export to Build Your Physical Music Collection. A Go script that analyzes your Spotify data to identify which albums to buy, complete with search links. Perfect timing with Spotify’s price hikes! 🎵💿
Aug 13, 2025 Just published a comprehensive deep dive into building murnau.audio-guide.cloud - a modern multilingual audio guide platform for museums. The technical write-up covers everything from Go/Templ architecture and HTMX frontend choices to CI/CD automation and why traditional servers often beat hyped FaaS solutions for simple persistent applications. 🏛️🎧
Aug 03, 2025 I’m already missing the Thursday evening criterium races at the Allianz Arena. Can’t wait for next season! 🚴‍♂️⚡
Nov 23, 2024 Currently, I am playing with Cloud Run on GCP (an awesome service 🚀). However, using volumes is a pain. I can use gcfuse to mount buckets to the filesystem. So far so good. However, it cannot be used for concurrent access. I could use NFS volumes as the only alternative, but the costs start at $200/month. Alternative: I could provision a small VM and set up NFS… but then I’d need a VM for my serverless application 😭😭😭😭.
Oct 02, 2024 The summer semester at TUM has come to an end. I’m grateful for the opportunity to teach and learn from the students. Now, we’re embarking on a new journey in the winter semester at HM 🚀. There, I will work with Thomas Schreck, Erwin Kupris, and Patrick Stoeckle to create the lecture Sicherheit in verteilten Systemen.
Aug 24, 2024 I’ve achieved the GIAC Certified Web Application Defender (GWEB) certification! Together with the SEC522 Training, it’s a really interesting learning experience. Great hands-on exercises to make web security tangible.
Mar 16, 2024 Recently, I took part in the Kraken Hunter Workshop. It was great fun and I learned a lot about securing workloads in the cloud, containers, K8s clusters, and VMs. In the end, we were Kraken Hunters :).
Nov 25, 2023 If you are searching for a fun challenge, try eksclustergames.com. It’s a little CTF from wiz.io for learning about EKS security. I did it with two colleagues and it was great fun! Check out my completion.
Oct 13, 2023 I’m excited to share an IETF draft my colleague and I wrote on simplifying OAuth 2.0 for container orchestration. This draft shows how Service Account Token Volume Projection in K8s makes client authentication easier and more secure for developers. If you’re interested, please join in the discussion and mail us.
Jul 15, 2023 I’ve achieved the GIAC Mobile Device Security Analyst (GMOB) certification! It’s been an incredible journey of learning and growth in the field of cybersecurity. 🤜 🤛
Oct 13, 2022 Just came back from the COLLABS Info Day in Novi Sad, Serbia. Finally, I could meet the people we are collaborating with in person. Looking forward to the next one 😉
Sep 02, 2022 I’m happy to share that I’ve earned my CIPP/E certification from the IAPP. It’s a step forward in my journey to promote privacy and data security.🤜 🤛
Aug 27, 2022 Just came back from Helsinki, :wink:. I had an awesome time presenting my paper, which you can access here. I’m looking forward to working with and meeting all the people at the conference again.
Jun 28, 2022 Just came back from France. Beautiful country, nice people, and great food :heart:. You can check out my blog for some beautiful landscapes.
Jun 09, 2022 Came back from Brussels, :smile:. I had a great time meeting cybersecurity experts from around the EU during the ConvergenceNext event. I’m looking forward to working with them in the future. I also wrote a quick blog about the conference.