Erlend Oftedal

Reminder that the Call for Presentations for Sikkerhetsfestivalen (The Security Festival) is open. OWASP Oslo is hosting an AppSec track. Scroll down the page for English version:

sikkerhetsfestivalen.no/alle-nyheter...

10.02.2025 11:20 — 👍 1    🔁 2    💬 0    📌 0

The CFP for the developer conference NDC Oslo closes today. Security talks of course also very welcome.

ndcoslo.com/call-for-pap...

06.01.2025 07:26 — 👍 4    🔁 3    💬 0    📌 0

My latest blog post is live! Check your Ruby on Rails applications for the use of params[:_json]

nastystereo.com/security/rai...

10.12.2024 08:30 — 👍 34    🔁 14    💬 1    📌 2

📡 OWASP Secure Headers Project: The "Response Headers" section has been updated with a series of very interesting blog posts about the "Cross-Origin-Embedder-Policy", "Cross-Origin-Opener-Policy" and "Cross-Origin-Resource-Policy" headers.

#appsec #appsecurity #oshp

📖 owasp.org/www-project-...

06.12.2024 07:52 — 👍 25    🔁 6    💬 1    📌 1

It wasnt my work. I was just sharing the article.

19.11.2024 13:26 — 👍 0    🔁 0    💬 1    📌 0

Breaking Down Multipart Parsers: File upload validation bypass TL;DR: Basically, all multipart/form-data parsers fail to fully comply with the RFC, and when it comes to validating filenames or content uploaded by users, there are always numerous ways to bypass va...

Great read on bypassing upload filters:
blog.sicuranext.com/breaking-dow...

19.11.2024 08:10 — 👍 16    🔁 7    💬 0    📌 1

Best suggestion so far. Good find!

19.11.2024 04:10 — 👍 0    🔁 0    💬 0    📌 0

See AllowedAADCharacters here: learn.microsoft.com/en-us/azure/...

18.11.2024 14:53 — 👍 0    🔁 0    💬 1    📌 0

Does anybody know why Microsoft is blocking the string ".@" in passwords in Azure AD B2C custom policy examples? It's not that they are blocking the individual characters, but that exact combination.

18.11.2024 14:51 — 👍 0    🔁 0    💬 1    📌 0

Call for Papers - NDC Security 2025 | Security Conference for Software Developers NDC Security 2025 is a 4-Day Event for Software Developers with a focus on Security. 20-23 January 2025 - Radisson Blu Scandinavia Hotel.

The CFP for NDC Security in Oslo, Norway is about to run out! Submit your talk today!

ndc-security.com/call-for-pap...

13.09.2024 07:37 — 👍 1    🔁 0    💬 0    📌 0

hacker drake: you used to shell me on my call phone

11.03.2024 21:49 — 👍 1    🔁 0    💬 0    📌 0

Addition to headline «also I dont want to»

23.01.2024 21:25 — 👍 0    🔁 0    💬 0    📌 0

Someone figured out how to do this back in March it seems: systemweakness.com/new-prompt-i...

19.10.2023 08:41 — 👍 0    🔁 0    💬 0    📌 0

Oh well...

19.10.2023 08:39 — 👍 0    🔁 0    💬 1    📌 0

For people with more than one slack of varying importance, this grouping of the slacks is not a good design choice. I don't care if the least important slack has unreads. Now I have to click or hover to see which one it is.

13.09.2023 08:24 — 👍 5    🔁 0    💬 0    📌 0