Familiar with EDB.
Oslo, Norway
Joined May 2008
- Tweets232
- Following48
- Followers154
- Likes18
Lasse Karstensen retweeted
Counting unique visitors without using cookies, UIDs or fingerprinting. notes.normally.com/cookieles… – at Nogent-sur-Marne, France
IPv4 price forecasts for 2022-2023 lassekarstensen.wordpress.co…
Lasse Karstensen retweeted
GPRS (2G & 3G data) encryption schemes GEA-1 and GEA-2 have a security of 2^40 (due to a backdoor) and 2^45 (apparently unintentional) instead of the expected 2^64, which translates to practical, real-time attacks.
#ePrint Cryptanalysis of the GPRS Encryption Algorithms GEA-1 and GEA-2: C Beierle, P Derbez, G Leander, G Leurent, H Raddum, Y Rotella, D Rupprecht, L Stennes ia.cr/2021/819
Lasse Karstensen retweeted
merry xss-mas! here’s one from chessbase.com that was fixed recently. send <script>if ($('.cbChatUserName')[0].innerText !== me) idResign.click() }</script> to win :)
Lasse Karstensen retweeted
New breach: Foodora had 583k unique customers exposed in 2016. Data included names, delivery addresses, phone numbers and passwords stored as either salted MD5 or bcrypt. 73% were already in @haveibeenpwned. Read more: databreachtoday.com/delivery…
Lasse Karstensen retweeted
Apple paid $100k bounty for critical JWT impl. flaw in their "Sign in with Apple" authentication service: an attacker could perform full account takeover of *any* account in 3rd party applications that lacked additional security (May 30) bhavukjain.com/blog/2020/05/…
/c @thegrugq
Lasse Karstensen retweeted
The arguments in defense of JWT are the same as PGP:
‣ it supports good crypto, too;
‣ it just needs an opinionated library;
‣ you can use only the good parts;
‣ it's battle tested;
‣ it's flexible;
‣ everything can be misused…
You can imagine how I feel about them.
Lasse Karstensen retweeted
Over 100 påmeldte til seminaret vårt om to uker, og vi har booket en fjerde foredragsholder: Marcin Borratynski, Head of Quant fra CERNs pensjonsfond, vil gi en presentasjon om bruk av maskinlæring for fundamental aksjeanalyse. Info og gratis påmelding: seminar.nfkf.no/machinelearn…
Lasse Karstensen retweeted
Today, at 15:35, we made our final /22 IPv4 allocation from the last remaining addresses in our available pool. We have now run out of IPv4 addresses.
Read our full announcement here:
ripe.net/publications/news/a…
In the picture, the Registration Services team at the RIPE NCC
Lasse Karstensen retweeted
I've been doing a bit of research and testing on HTTP hop-by-hop headers and how abusing them may offer exploit potential nathandavison.com/blog/abusi…
Lasse Karstensen retweeted
"What's the German word for, 'The pain associated with migrating MFA tokens to a new mobile device'?"
Lasse Karstensen retweeted
RT @cfarivar: Google still keeps a list of everything you ever bought using Gmail, even if you delete all your emails
cnbc.com/2019/07/05/google-g… – at Paris, France
Lasse Karstensen retweeted
Covering blockchain voting in my election security class feels like having a syllabus in an organic chemistry class devote three lectures to alchemy just so that the students will know what to say when their future employers expect them to turn lead into gold.
