e-Invoicing vs. GDPR and Professional Secrecy: What the State Didn’t Tell Half a Million Businesses
Slovakia’s e-invoicing act contains not one mention of personal data protection. The bar association asked to shield client identities — rejected. The secret service asked the same for itself — accepted.
Against e-invoicing: Corporate Stockholm Syndrome
Mandatory e-invoicing from 2027 hits 530,726 entities in Slovakia. The government never costed the one fee businesses will actually pay.
Summer 2026 at Nethemba: stack two 13.37% hacker discounts (up to ~25% off everything) + AI-augmented pentesting you can actually trust
Summer is here — and so is our favourite tradition. The 13.37% hacker discount is back. But this year we are going further: you can stack a second 13.37%, and we are being radically transparent about how — and whether — AI ever touches your data. 1. The summer hacker discount: 13.37% off everything Through […]
How to Build a Self-Replicating, Autonomous AI (That Won’t Be Easy to Shut Down)
A practical look at how today’s protocols and services could already make a self-replicating, autonomous AI possible — anonymous crypto wallets, no-KYC VPS/GPU providers, censorship-resistant inference, Nostr coordination, and the implications.
Summer news: Hacker discount of 13.37% on all our services + great educational hacker videos + see you at WHY2025!
For our loyal and new customers, we are offering a 13.37% discount on all penetration tests and security audits, provided the binding order is received by August 31, 2025, and the work commences before this date. If you are planning penetration testing or security audits this year, consider rescheduling them for the summer. Not only […]
How to maximize anonymity when accessing the Internet on mobile
The problem of mobile anonymity Dystopia is in full swing in Europe, and achieving true anonymity from mobile devices is a big problem. The picture below shows that most countries require mandatory registration of SIM cards on the national ID or passport. This means that all mobile operators in a given state (and, of course, […]
Discovery of CVE-2022-24833
When on a security audit for a client it was discovered that a key component – the open-source private paste service PrivateBin contained a previously undocumented flaw. Cross-site-scripting is nothing new. I actually feel there must be prehistoric cave paintings and markings somewhere in the world containing some variation of <script>alert(1)</script>. Although XSS payloads embedded […]
Possibility of widespread leak and misuse of EU vaccination certificates
How to get an EU vaccination card for any citizen of the Slovak Republic based on their name and date of birth 1 Vulnerability history Similar to our recent revealed vulnerability in the NCZI systems (NCZI or NHIC National Health Information Center), where we were able to download 130 000 PCR/antigen tests and personal information […]
Mobile app security expert WANTED!
Job Description: Search for security vulnerabilities in Android/iOS apps and in the most diverse web applications and web services. Testing of mobile applications involves detailed testing of mobile applications and relevant web services in accordance with the OWASP Mobile Security Testing Guide. The result of the testing is documented by creating a final report in […]
Threat Hunting and Threat Intelligence services
Watch a video and read our comprehensive answers: Describe what Threat Hunting means and why it can be helpful for companies? On average, adversaries are present within an organization for more than 140 days before they are detected, and it often takes weeks and even months to entirely remove them. The time during which an […]