Per Thorsheim

Czech President Petr Pavel says a ceasefire between Russia and Ukraine was “quite close” – until Donald Trump lifted sanctions on Russian diesel. 🔗 vist.ly/5pjp8

Updated my free in-browser mailcheck tool, version Oct-14-2026. Github: github.com/thorsheim/Ma... Live: passwordscon.org/mailcheck/

Danfoss AK-SM800 & older AK-SC355 Refrigeration Control Systems both has Supervisor:12345 as default usr/pwd, according to online documentation. Meaning the presumed automated pwd change every 24 hours into today's date was much better than running defaults. Then again; when found it was game over.

Microsoft company fined NOK 92 million The advertising service Xandr processed and shared sensitive personal data in breach of data protection law. Xandr acted as an intermediary that relayed the personal data of Grindr users in Norway. www.datatilsynet.no/en/news/news...

#PasswordJokes

RIP Margaret Hamilton An extraordinary woman with an amazing history. news.mit.edu/2026/margare...

A physical piece of Internet history is up for auction at Christie's. The worlds first and possibly only real-world implementation of RFC 1149: Standard for the transmission of IP datagrams on avian carriers onlineonly.christies.com/s/fine-print...

Det blir #Halloween Meetup hos Gritera i Oslo torsdag 29 oktober, med oppmøte fra kl 16:30. Påmelding: send melding til meg. Som vanlig har vi en dedikert gruppe på Signal. Vi har en *skremmende* lyntale på plass allerede, men ønsker å få inn flere forslag.

Watching the orange monkey on stage in the UN. Can't wait for the midterms.

We’ve rolled out Device Bound Session Credentials to 100% of Report URI logins. 🔐 67.7% of our active sessions are already device-bound, making this what we believe to be one of the first production DBSC deployments outside Google. Here’s how we did it: blog.report-uri.com/we-rolled-ou...

😬🤷🏼

Law enforcement agencies in Norway are investigating whether Norwegian telecom Telenor aided crimes against humanity through its work providing customer data to the brutal military regime currently governing Myanmar therecord.media/norway-inves...

Meetup hos Gritera i Oslo torsdag 29 oktober. Halloween 👻 🎃 tema! Påmelding kommer. Forslag til lyntaler sendes til meg. Tema: skrekkhistorier fra virkeligheten. 😈 Takk til Nina Pettersen & Brede Trollsås!

Today I did my presentation «Praise to the few and fury to those without: convincing Norway to do RPKI ROA & ASPA» at NONOG-8 in Oslo. Conference program & recording available here: nonog.net/events/nonog...

No @adobe.com, I won't install your spyware intended to check if I am running cracked versions of your software. This for sure isn't to protect me from potential malware! Nag me again and my current license for Lightroom will end. Period. I've moved on to other alternatives for everything else.

Please mr orange, do not come to Oslo for the king's funeral. This isn't your funeral, and we don't want this to be a "show" for you.

AS5619 (my employer) now has valid BGP RPKI ASPA in place. Most do not know, understand or care. Me? Celebrating all alone.

Hey Americans & Canadians! It seems Apple Maps have caved to Trump's demand for "Lake Amerika", but only in the US. (screenshot from 08:06 Sept 2, 2026) Best regards from Norway

Updated my free in-browser mailcheck tool again, this time adding a new tab for connection test for your browser: dnssec validation, IPv6 and BGP RPKI test. Github: github.com/thorsheim/Ma... Live use: passwordscon.org/mailcheck/

Happy Skynet day to all those who celebrate

November 2025 sjekket jeg dns/web/epost sikkerhet hos de 13 selskapene som da var godkjent av NSM for hendelseshåndtering. Nå er det 15 på listen, og det var på tide å ta en ny sjekk. www.linkedin.com/pulse/godkje...

Key takeaways from JP Aumasson (@veorq) at Black Hat Asia on realistic PQC migration: Symmetric ciphers like AES are safe, but public key encryption faces Harvest Now, Decrypt Later risks today. Prioritize TLS and KEMs over signatures. youtu.be/_M0of-6aLpk 1/3

I've made lots of updates to my free in-browser dns/email checker. Github: github.com/thorsheim/Ma... Live: passwordscon.org/mailcheck/ No trackers. Free. In your browser.

Voss herad bruker Microsoft for epost, og får 100% score på DNS & epost sikkerhet. Politiets IT-enhet (politiet) får bare 75% score. På Personverndagene 2026 14 -16 september holder jeg kurs om DNS & epost sikkerhet. Sjekk ut fullt program og meld deg på her: personverndagene.no

Finishing my analysis on BGP RPKI ROA & ASPA deployments across entire RIPE.net coverage area for 2 upcoming talks. Also: running Claude to better understand / figure out the BGP vulnerabilities @spacerog.bsky.social, @weld.bsky.social & rest of L0pht warned about back in May 1998. 🤩

A software PTZ controller for up to 4 cameras, usable from Mac, iPad and iPhone — like a hardware PTZ joystick controller, but on your screens. First version. Small node server on mac/linux, then use any browser on any device for control and video preview. github.com/thorsheim/vP...

Stolen valor from Mr. Bone Spurs. An insult to every man and woman who has worn the uniform.

The Synthetic Insider: Securing Non-Human Identities in Cloud Workflows Mackenzie Jackson #BSidesLV 2026 #PasswordsCon

#BSidesLV 2026 #PasswordsCon Criminal Hijacking: Profiling Threat Actors engaged in session takeover with Infostealer Logs Eric Clay and Eric Boivin

#BSidesLV 2026 #PasswordsCon My email address is an API key? from Joe Leon

#BSidesLV 2026 #PasswordsCon The Dots Do Matter: Gmail's Invisible Blindspot from Keren Elazari

#BSidesLV 2026 Last minute change up, I am going to be presenting a 3rd talk TODAY at noon as part of #PasswordsCon Come see "From Pets To Cattle To Agents: Evolving Identity And Security For Workloads" You will not want to miss it!!

#PasswordsCon track for tuesday Aug 4 (today) @bsideslv.org streaming live on Youtube: www.youtube.com/watch?v=GhYS...

Linkedin (still) promoting the use of their AI tools for different purposes while also introducing an option for reporting ads and posts as AI slop is … well… I really do not know how to describe it. 🤷

The new “⚠️Seems like AI slop” button on LinkedIn is sending me into orbit lmao

A quantum-resistant cryptography algorithm that was under consideration to become an official US standard has been taken out of the running after an Anthropic security model helped find a flaw that rendered it broken. arstechnica.com/security/202...

I will do a talk titled "Praise to the few and fury to those without: convincing Norway to do RPKI ROA & ASPA" at NONOG-8 in Oslo on September 9. I sincerely hope to see people from all Norwegian ISPs or organisations handling BGP towards the Internet in the room. nonog.net/events/nonog...

Updated my in-browser DNS/email security checker to include latest DMARCbis RFCs (9989, 9990 & 9991) in a new section of the DMARC tab. Code at github.com/thorsheim/Ma..., with live version available here: passwordscon.org/mailcheck/

#PasswordsCon is coming to Munster Technological University in Cork, Ireland, December 8-9! Additionally our Chatham house rule day will be on December 7, while the Cyber Research Conference Ireland (CRCI) will be at the same location on December 10. Info & more: events.mtu.ie/index.cfm?pa...

#PasswordsCon

The BSides Las Vegas schedule is out. We have a lot of talks across several tracks this year. All the details are online at: bsideslv.org/schedule

🇳🇴🇳🇴🇳🇴

I think we just passed oops.

Hacklore spreads through word of mouth as much as it does more official channels. Fight back against zombie advice. 🧟‍♀️ Send the hacklore.org website to at least two friends today so they can learn what really keeps accounts and devices safe! 🔐

Skriv en falsk pinkode på betalingskortene dine. Da kan du lure skurkene som stjeler dine kort, varsle bankene og redde pengene dine. Enkelt og veldig lurt!

På #Personverndagene 2026 skal jeg holde kurs for å vise hvordan man kan gratis teste internett sikkerheten for egen organisasjon, leverandører og andre. Risiko vil bli forklart, nødvendige tiltak blir gjennomgått, og du får en sjekkliste med det du trenger til jobben. personverndagene.no

Post-kvante Kryptografi (PQC) er fremtidens sikring av data i møte med trusselen fra kvantedatamaskiner. En god del norske nettsteder har allerede støtte for dette, i den grad det er mulig å sette opp. Jeg har sjekket! thorsheim.net/pqc/

All you have to do is change the date.

I'm sorry, but whenever I hear or see discussions about tactics etc in the FIFA World Cup on national news, this is what I think the reality actually is. Also: I seriously do not take any interest whatsoever in football.