Stolen valor from Mr. Bone Spurs. An insult to every man and woman who has worn the uniform.
Per Thorsheim
@thorsheim.bsky.social
Founder of #PasswordsCon. Above average interested in passwords & digital authentication. Online since 2400baud. I made the world use RFC 3207 STARTTLS for email encryption.
The Synthetic Insider: Securing Non-Human Identities in Cloud Workflows Mackenzie Jackson #BSidesLV 2026 #PasswordsCon
#BSidesLV 2026 #PasswordsCon Criminal Hijacking: Profiling Threat Actors engaged in session takeover with Infostealer Logs Eric Clay and Eric Boivin
#BSidesLV 2026 Last minute change up, I am going to be presenting a 3rd talk TODAY at noon as part of #PasswordsCon Come see "From Pets To Cattle To Agents: Evolving Identity And Security For Workloads" You will not want to miss it!!
#PasswordsCon track for tuesday Aug 4 (today) @bsideslv.org streaming live on Youtube: www.youtube.com/watch?v=GhYS...
BsidesLV 2026 - PasswordsCon - Tuesday
YouTube video by BSidesLV
youtube.com
Linkedin (still) promoting the use of their AI tools for different purposes while also introducing an option for reporting ads and posts as AI slop is … well… I really do not know how to describe it. 🤷
The new “⚠️Seems like AI slop” button on LinkedIn is sending me into orbit lmao
A quantum-resistant cryptography algorithm that was under consideration to become an official US standard has been taken out of the running after an Anthropic security model helped find a flaw that rendered it broken. arstechnica.com/security/202...
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
HAWK withstood years of testing that had yet to uncover a fatal weakness found through Mythos.
arstechnica.com
I will do a talk titled "Praise to the few and fury to those without: convincing Norway to do RPKI ROA & ASPA" at NONOG-8 in Oslo on September 9. I sincerely hope to see people from all Norwegian ISPs or organisations handling BGP towards the Internet in the room. nonog.net/events/nonog...
Updated my in-browser DNS/email security checker to include latest DMARCbis RFCs (9989, 9990 & 9991) in a new section of the DMARC tab. Code at github.com/thorsheim/Ma..., with live version available here: passwordscon.org/mailcheck/
GitHub - thorsheim/Mailcheck: Standalone html that runs in your browser to check any domain: DNSSEC, MX, PTR, DANE, SPF, DKIM, DMARC, BIMI, TLS-RPT, MTA-STS, CAA, RPKI, Security.TXT and WHOIS info.
Standalone html that runs in your browser to check any domain: DNSSEC, MX, PTR, DANE, SPF, DKIM, DMARC, BIMI, TLS-RPT, MTA-STS, CAA, RPKI, Security.TXT and WHOIS info. - thorsheim/Mailcheck
github.com
#PasswordsCon is coming to Munster Technological University in Cork, Ireland, December 8-9! Additionally our Chatham house rule day will be on December 7, while the Cyber Research Conference Ireland (CRCI) will be at the same location on December 10. Info & more: events.mtu.ie/index.cfm?pa...
MTU Events -
events.mtu.ie
The BSides Las Vegas schedule is out. We have a lot of talks across several tracks this year. All the details are online at: bsideslv.org/schedule
Hacklore spreads through word of mouth as much as it does more official channels. Fight back against zombie advice. 🧟♀️ Send the hacklore.org website to at least two friends today so they can learn what really keeps accounts and devices safe! 🔐
Skriv en falsk pinkode på betalingskortene dine. Da kan du lure skurkene som stjeler dine kort, varsle bankene og redde pengene dine. Enkelt og veldig lurt!
På #Personverndagene 2026 skal jeg holde kurs for å vise hvordan man kan gratis teste internett sikkerheten for egen organisasjon, leverandører og andre. Risiko vil bli forklart, nødvendige tiltak blir gjennomgått, og du får en sjekkliste med det du trenger til jobben. personverndagene.no
Post-kvante Kryptografi (PQC) er fremtidens sikring av data i møte med trusselen fra kvantedatamaskiner. En god del norske nettsteder har allerede støtte for dette, i den grad det er mulig å sette opp. Jeg har sjekket! thorsheim.net/pqc/
I'm sorry, but whenever I hear or see discussions about tactics etc in the FIFA World Cup on national news, this is what I think the reality actually is. Also: I seriously do not take any interest whatsoever in football.
I wrote about what was actually in that #Fable guardrail bypass research paper, and why it should never have triggered an #AI model export control. We can't export control our way to cyber resilience. So many tshirt ideas. www.lutasecurity.com/post/the-fab...
Jeg viste spoofing i 2019 og forklarte mulighetene og konsekvensene gjennom en rekke foredrag, artikler og mediesaker, som i tillegg til Norge også dekket Sverige og Danmark. Så kommer Harrison Sand & NRK, BOOM! *IGJEN* Jeg har kommentert til NRK. www.nrk.no/norge/sarbar...
Sårbarhet avdekket: Telia og Ice kunne misbrukes i spoofingforsøk
To av Norges største teleselskaper hadde en feil som gjorde det mulig å tyvlåne andres telefonnummer.
nrk.no
Protip: add your name, address, alternative phone number & email to the lockscreen of your phone! In case you forget it somewhere, it will be so much easier for others to return the phone to you.
github.com/thorsheim/lo... A tiny, private, browser-based tool to turn any photo into a phone lockscreen that shows who the phone belongs to — so a lost or misplaced phone can find its way back to you. Everything runs locally in your browser. No image is ever uploaded — there is no server.
GitHub - thorsheim/lockscreen-generator
Contribute to thorsheim/lockscreen-generator development by creating an account on GitHub.
github.com
Praktisk tips før du skal ut på tur: legg til kontaktinfo på telefonens låseskjerm! AI genererte bilder av katt og hund. Mia er helt ekte, bilde brukt med tillatelse.
Dette er en oppgave som jeg fant opp i 2012, og som jeg har testet på mange ulike grupper mennesker i ulike aldre, med ulike morsmål og fra mange ulike land. Jeg har en egen video som forklarer meningen med oppgaven, men jeg synes du skal teste deg litt før du får se den. :) youtu.be/p5nTyjYtcK0
Babyelefanter elsker utendørs leketid - en liten utfordring til deg!
YouTube video by Per Thorsheim
youtu.be