15 organisasjoner skal bidra til å håndtere digitale angrep og cyberhendelser mot Norge. Har de noen god sikkerhet selv? Jeg har testet. www.linkedin.com/pulse/hvem-v...

I had a look at email security (for IRT teams) at organizations within the Norwegian higher research & education sector. They definitely have much to learn - and act upon - in order to improve their security. Once again using the free service internet.nl! www.linkedin.com/pulse/email-...

Happy to see that #Postfix has now got REQUIRETLS support (SMTP Require TLS Option - RFC 8689), written by @jimfenton.bsky.social and published in december 2019. A big step forward imho, and I hope to see more client & server support for REQUIRETLS in 2026! datatracker.ietf.org/doc/rfc8689/

Using internet.nl I was surprised and saddened when I saw that email security at Apples iCloud service seems a bit stuck a decade back in time, compared to Cloudflare & Microsoft, among others. So I wrote this article about it. Ping @aclu.org @eff.org www.linkedin.com/pulse/rotten...

Maximilian Golla @maximiliangolla.com presenting "Measuring the Risk Password Reuse Poses for a University" at #PasswordsCon in Prague, December 2, 2025. youtu.be/6dEQRwueX98

Michal Špaček @spazef0rze.bsky.social presenting his talk "Password Reuse Is a Dumpster Fire – We Brought a Hose" at #PasswordsCon in Prague, December 2, 2025. youtu.be/AuCNgoDf-5c

Rostyslav (Ross) Yevdiukhin presenting "OT Security meets reality" at #PasswordsCon in Prague, December 2, 2025. youtu.be/V6B81wrlVdo

Luci André Knudsen @woofie.dev presenting "How I Learned to Stop Worrying and Love ReBAC" at #PasswordsCon in Prague, December 2, 2025. youtu.be/WfXt2J2gYz8

YouTube playlist with videos from #PasswordsCon in Prague, December 1-3 2025 has been created, with the first video of Niels Loozekoot available. More videos to come. A big thank you to @nic.cz for sponsoring & hosting the event! youtube.com/playlist?lis...

Mezi vystupujícími na #PasswordsCon byl také náš kolega Jaromír Talíř. #MojeID #FIDO

#PasswordsCon Prague 2025 has come to an end. After 3 amazing days most of us have headed home to our respective countries around the world. Great location, lots and lots of food, and amazing organisation & sponsorship by @nic.cz Looking forward to Cork, Ireland, in December 2026! nic.cz

Hot off the #PasswordsCon press:

#PasswordsCon Prague 2025 livestream. Sponsored by @nic.cz www.youtube.com/live/lyio6sQ...

Hello Prague, nice to be here again! So incredibly ready for doing #PasswordsCon number 26 since 2010! This time with @nic.cz as sponsor, 3 full days and a stellar lineup of speakers & talks! www.passwordscon.org/prague-2025-...

I am honored and happy to be asked by @boblord.bsky.social to contribute & sign the open letter at hacklore.org. It is time to kill some "hacklore" - IT security advice that is now *seriously* outdated. Please read more at the link below, and tell everyone about it. hacklore.org

Registration for #PasswordsCon in Prague, December 1-3 closes this Sunday, Nov 23. Speakers & talks: www.passwordscon.org/prague-2025-... Venue & registration: www.nic.cz/passwordscon...

Jeg har skrevet litt om usikker epost hos Nasjonal Sikkerhetsmyndighet, og desto mer kritikk serveres til Forsvarsdepartementet. www.linkedin.com/pulse/grader...

Checking the web, dns & email security of 557 domains / law firms in Norway using internet.nl: www.linkedin.com/pulse/intern...

Checking the web, dns & email security of 557 domains / law firms in Norway using internet.nl: www.linkedin.com/pulse/intern...

Scandinavian Airlines (SAS) has launched Passkeys support, and they have chosen to call it "Hovednøkkel" in Norwegian. Directly translated to english = "Mainkey". 1) you don't have to remember a password. With "mainkeys" you can use stuff like fingerprint or face to login.

Almost 300 organizations within the tech landscape found in my city Bergen, Norway. With 337 domains I set out to make a snapshot of their publicly visible internet security: DNS, Email & Web. Here is what I found, from startups to global giants. (Linkedin article) www.linkedin.com/pulse/little...

I just cannot find any specific info on how Netflix, HBO Max, Disney or Prime on how to handle my daughters access to their services when she lives 50% at my place and 50% with her mother. They cannot seriously require 2 subscriptions, but how do I handle it? Subscriptions are for people, not IPs.

I've done something I thought I would never do. I've used Anthropic Claude to "vibe" code a Chrome plugin to test if a website is protected with DNSSEC & RPKI for BGP. Warning: it seems to work. USE AT YOUR OWN RISK! Feedback wanted. 😬 github.com/thorsheim/rp...

We've just launched an awesome new feature at report-uri.com! You can now collect Integrity Metadata, natively from the browser, for JavaScript running on your site! It takes seconds to deploy, so read the thread for the amazing benefits this will bring. scotthelme.co.uk/capture-java...

I just cannot find any info about Nessus or Nexpose having modules to find missing or incorrect RPKI for prefixes or AS numbers. Neither have I seen any other vulnerability scanners doing this. Missing RPKI may be considered a weakness or flaw, but still... scanners should detect & report imho.

Well well well Google Chrome, is this how you have decided to treat @kalilinux.bsky.social all of a sudden, or do they have issues on their side, or is it just .... me? (Version 140.0.7339.208 official build on Windows 11)

1/ Hi, I'm TProphet. I write the Telecom Informer for @2600.com. A lot of people have been asking me about www.nbcnews.com/politics/nat... given that I'm somewhat knowledgeable in the area. Here's my take: I'm kind of astonished that this is public, and it isn't normal that it would ever be.

Disney learned nothing from Andor.

Not really an overstatement to say that the test of a free society is whether or not comedians can make fun of the country's leader on TV without repurcussions.

Kimmel. Colbert. Suits against the New York Times, Wall Street Journal, and 60 Minutes. Extorting settlements from CBS, ABC, and others. Blocking the AP's access to the White House. 🧵

"Hey, Let's use AI to control access to AI!" What could possibly go wrong?

Thread. Read, and read again. We need to stop the ChatControl proposal here in EU. Now. For good.

I've always tried to do something new & funny for each iteration of #PasswordsCon. So here is the "PasswordsCon Song" sing-a-long. Generated with ChatGPT (lyrics) and sound by Suno. #PasswordsCon will be in Prague, December 1-3, kindly sponsored by @nic.cz. More info: passwordscon.org

Y'all, I went to #BSidesLV 2025 and had an AMAZING time. I wrote my thoughts up and they are already live blog.gitguardian.com/bsides-las-v... #passwordscon

List of speakers & talks for #PasswordsCon in Prague, December 1-3. Kindly sponsored by @nic.cz. More speakers & talks to be added soon. www.passwordscon.org/prague-2025-...

2 scam calls from Swiss numbers today (+41). Robot voice claiming to be Paypal, unauthorised transaction of EUR 699, press 1 to authorize or 2 to talk to support staff. Pressing 1 still takes me to support staff (Surprise!), and dude was REALLY surprised when I still insisted to authorize. 😂

Asking everyone: Is there a complete guide on how to install, register and use @signal.org without ever having to connect it with a phone number? (Closing in on the old 'iPod touch is the safest phone there is' way of thinking...)

Professor Marte E. Kjørven ved UiO og Professor Kristian Gjøsteen ved NTNU har debattinnlegg i DN om BankID sitt skytespill. Verdt å lese teksten også på LinkedIn, samt studere alle detaljer i illustrasjonsbildet. Akademikere har det gøy på jobb! www.linkedin.com/posts/marte-...

"and just like that, POOF, Stø Invaders was gone."

Mange var kritiske til det hemmelige spillet i BankID. 👽 Nå forsvinner det:

#PasswordsCon CFP closes tonight at midnight, Sunday september 7. We have received many amazing talks already, but still room for more! 🤩 Https://PasswordsCon.org/

With the Norwegian BankID app you can now: 🤩 🤩 PLAY SPACE INVADERS 🤩 🤩 - Identify yourself - Confirm payments - Sign documents

Norwegian #BankID app #EasterEgg

Has anyone seen any info from streaming services like @netflix.com, Youtube, HBO Max, Disney+ etc on how to handle family subscriptions when your kid is 50/50 with mom and dad? My kid is at my place 50% & is part of my family subscription. She wants to use it on her own tv at her moms place too.

Old: Don't roll your own cryptography. New: Don't roll your own ID/age verification.

❤️

Tomorrow I'll do my my talk here at #sikkerhetsfestivalen in Lillehammer, Norway. "Help, I'm under 18 but want to get in!" A story & talk about digital IDs and their (ab)use & sharing between teenagers. Risk? "Well, my friends are inside the club & I want to get in! That's the risk I see dad!"

#TACO www.cnn.com/2025/08/22/p...

Unfortunately, Bluesky is unavailable in Mississippi right now, due to a new state law that requires age verification for all users. While intended for child safety, we think this law poses broader challenges & creates significant barriers that limit free speech & harm smaller platforms like ours.