Security researcher at Crosspoint Labs. AppSec. Tweets are my own and do not express the opinion of my employer. OWASP. retire.js
Oslo, Norway
Joined January 2008
- Tweets11.2K
- Following2.3K
- Followers3.7K
- Likes11.1K
Erlend Oftedal retweeted
New year, new me! There's a 2026 now, BSides Oslo 2026 that is. October 29th at Vulkan Arena. Information on tickets, CFP and all the rest to come.
Erlend Oftedal retweeted
A DBA walks into a NOSQL bar, but turns and leaves because he couldn't find a table
Erlend Oftedal retweeted
It's 2025!
🗓️ We have a date: October 30th.
📢 We have a CFP: forms.gle/M5BfbGpqhdmZL29N6
🌐 We have a website: bsidesoslo.no
Erlend Oftedal retweeted
I've made a new Azure DevOps extension that runs Retire.js as part of a build pipeline. Retire.js will detect vulnerable JavaScript libraries in your code. All credits go to @webtonull for building this amazing scanner. Get the extension here: marketplace.visualstudio.com…
Erlend Oftedal retweeted
⚠️ Developers, please be careful when installing Homebrew.
Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.
Erlend Oftedal retweeted
new blogpost time!!
this one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty
lots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c:
have fun!
lyra.horse/blog/2024/09/usin…
Erlend Oftedal retweeted
Ticket sales for BSides Oslo 2024 just opened at letsreg.com/no/event/bsideso….
Erlend Oftedal retweeted
Not to mention the staff like Kelly and Dawn and some of the old school folks like Laura Grau and Kate Hartmann. They were amazing and held so much together for what was basically a community of misfits trying to do good work!
Erlend Oftedal retweeted
How's your summer? Come up with any swell ideas? Our CFP is still open, and you have until August 11 to submit it docs.google.com/forms/d/1K3H…
Erlend Oftedal retweeted
We're out of hibernation and gearing up for this year's event! The date is October 14th 2024 with more details to follow, but our CFP is open: docs.google.com/forms/d/1K3H…
Erlend Oftedal retweeted
Interested in the full story and technical details? Read it here:
breachproof.net/blog/lethal-…
P.S. more is coming!
Erlend Oftedal retweeted
I'm excited to share a new open-source project: the Silicon LLM Training & Inference Toolkit, short SiLLM.
Check out the project on Github here:
github.com/armbues/SiLLM
Erlend Oftedal retweeted
So the emails after the #NDCOslo evaluations have gone out. I have mixed feelings. About 120 people are pretty happy now, and about 850 people are probably a bit sad. To the ones that didn't make it this year, I feel you. It can suck big time, I know, I've been there too.
Erlend Oftedal retweeted
jQuery 4.0.0 supports Trusted Types github.com/jquery/jquery/iss… (thanks, @m_gol 👏👏👏) and this integration exemplifies _why_ Trusted Types can stop DOM XSS in a way other approaches can't. Let me explain (thread).
Erlend Oftedal retweeted
Indirect prompt injection is so crazy I think it might become the new blind XSS. Here’s the attack in a nutshell, illustrated by @WebSecAcademy
