@thorsheim@mastodon.social

Per Thorsheim @thorsheim@mastodon.social · Jul 23, 2026

#PasswordsCon is coming to Munster Technological University in Cork, Ireland, December 8-9! Additionally our Chatham house rule day will be on December 7, while the Cyber Research Conference Ireland (CRCI) will be at the same location on December 10. Info & more: https://events.mtu.ie/index.cfm?page=events&eventId=1427

0

1

0

Per Thorsheim @thorsheim@mastodon.social · Jun 23, 2026

Skriv en falsk pinkode på betalingskortene dine. Da kan du lure skurkene som stjeler dine kort, varsle bankene og redde pengene dine. Enkelt og veldig lurt!

4

0

3

0

Per Thorsheim @thorsheim@mastodon.social · Jun 23, 2026

På #Personverndagene 2026 skal jeg holde kurs for å vise hvordan man kan gratis teste internett sikkerheten for egen organisasjon, leverandører og andre.

Risiko vil bli forklart, nødvendige tiltak blir gjennomgått, og du får en sjekkliste med det du trenger til jobben.

https://personverndagene.no/

1

0

2

0

Per Thorsheim @thorsheim@mastodon.social · Jun 18, 2026

Post-kvante Kryptografi (PQC) er fremtidens sikring av data i møte med trusselen fra kvantedatamaskiner. En god del norske nettsteder har allerede støtte for dette, i den grad det er mulig å sette opp. Jeg har sjekket!

https://thorsheim.net/pqc/

1

0

1

0

Per Thorsheim @thorsheim@mastodon.social · Jun 16, 2026

Whenever I hear or see discussions about tactics etc in the FIFA World Cup on national news.

1

0

Per Thorsheim @thorsheim@mastodon.social · Jun 11, 2026

The near future of developers who can't write code themselves.

4

0

3

0

Per Thorsheim @thorsheim@mastodon.social · Jun 03, 2026

Jeg viste spoofing i 2019 og forklarte mulighetene og konsekvensene gjennom en rekke foredrag, artikler og mediesaker, som i tillegg til Norge også dekket Sverige og Danmark.

Telenor ble bøtelagt av Nkom. Datatilsynet kom med kritikk, men kunne ikke gi ekstra bot.

Så kommer Harrison Sand & Norsk rikskringkasting (NRK) med Martin Gundersen på banen nok en gang bare i år, og BOOM, hva finner de da?

Flere sårbarheter som muliggjør spoofing.
Jeg har kommentert til NRK.

https://www.nrk.no/norge/sarbarhet-avdekket_-telia-og-ice-kunne-misbrukes-i-spoofingforsok-1.17898532

1

0

Per Thorsheim @thorsheim@mastodon.social · Jun 03, 2026

Protip: add your name, address, alternative phone number & email to the lockscreen of your phone!

In case you forget it somewhere, it will be so much easier for others to return the phone to you.

6

2

4

0

Per Thorsheim @thorsheim@mastodon.social · May 12, 2026

Replying to @thorsheim@mastodon.social

@Colman@mastodon.ie And just like that, the story continues: https://www.theregister.com/cyber-crime/2026/05/12/congress-investigates-canvas-breach-after-instructure-cuts-deal-with-shinyhunters/5238927?utm_source=dlvr.it&utm_medium=bluesky

1

0

Per Thorsheim @thorsheim@mastodon.social · May 12, 2026

Replying to @Colman@mastodon.ie

@Colman@mastodon.ie Will be interesting to see if this is the end of this tragic story. I doubt it.

1

0

Per Thorsheim @thorsheim@mastodon.social · May 12, 2026

Gut feeling: Instructure (who owns Canvas) chose to pay the ransom because the consequences for a massive number of students worldwide in their exam period before summer could be devastating.

I can only imagine the ransom paid is *massive*

2

1

0

Per Thorsheim @thorsheim@mastodon.social · May 12, 2026

Right now attending the first ever BSides conference here at home in Bergen, Norway!

https://2026.bsidesbergen.no/

3

0

1

0

Per Thorsheim @thorsheim@mastodon.social · Apr 30, 2026

Updated my mailcheck tool to better fit mobile displays. Github: https://github.com/thorsheim/Mailcheck Live: https://passwordscon.org/mailcheck

1

2

0

Per Thorsheim @thorsheim@mastodon.social · Mar 27, 2026

Replying to @dbelson@mastodon.social

@dbelson@mastodon.social Would *love* to talk one day, as I'm using CF radar in preparations for that talk in august, but also to promote the use of rpki to everyone relevant. "Never heard of it." "Not a problem." "Doesn't happen to us." "That's someone elses problem." "Theory. Ransomware is for real, so we focus on that." "No documented losses or problems due to lack of rpki." I've heard other versions as well. CF Radar provide documentation on some of those, but could - imho - provide more info.

0

Per Thorsheim @thorsheim@mastodon.social · Mar 27, 2026

I will be presenting "Our Vulnerable Networks" at #Sikkerhetsfestivalen 2026, talking BGP & RPKI history, status & "how to get it done".

Through history back to 1989 (BGP), L0pht testifying for congress in 1998 and lots more, I will explain the problem, the gaps, current status and what we need to do to fix a global internet routing security issue that is exploited many times daily.

Thanks to @internet_nl@mastodon.nl & @ripencc@mastodon.social for their tools & knowledge, and the @cloudflare@noc.social routing radar!

8

1

6

0

Per Thorsheim @thorsheim@mastodon.social · Mar 26, 2026

@km@mastodon.babb.no sant nok siden du startet med moderne EHLO, ikke gammeldags HELO.

mastodon.babb.no

advokatt (@km@babb.no) - Babb.no

0

Per Thorsheim @thorsheim@mastodon.social · Mar 26, 2026

@km@mastodon.babb.no 220 STARTTLS

mastodon.babb.no

advokatt (@km@babb.no) - Babb.no

0

Per Thorsheim @thorsheim@mastodon.social · Mar 26, 2026

Jeg har vært på podcastinnspilling hos Advokatforeningen og snakket om mine undersøkelser av epost sikkerhet hos deres medlemmer. Resultatet kan du høre på Spotify og andre podcast plattformer. Mer info her:

https://www.advokatforeningen.no/aktuelt/podcast/bits-and-bytes-for-advokater-per-thorsheim/

Advokatforeningen

Bits and bytes for advokater: Per Thorsheim

Sikkerhetsekspert Per Thorsheim har brukt fritiden på å sjekke sikkerheten på nettsidene og e-posten til norske advokatfirmaer.

4

0

2

0

Per Thorsheim @thorsheim@mastodon.social · Feb 27, 2026

RE: @finnmyrstad@eupolicy.social

Proud to support this, and have co-signed the letter to Norwegian authorities.

eupolicy.social

Finn Lützow-Holm Myrstad: "❓Have you noticed that digital products and servi…" - EUpolicy.social - A

4

0

1

0

Per Thorsheim @thorsheim@mastodon.social · Feb 25, 2026

Replying to @samueljohnson@mstdn.social

@samueljohnson@mstdn.social @internet_nl@mastodon.nl Here you go: https://thorsheim.net/2026/02/data-protection-agencies-dpa-should-have-good-security-right/

3

0

Per Thorsheim @thorsheim@mastodon.social · Feb 25, 2026

Data Protection Agencies should have good security, right?

I've scanned almost 160 DPAs around the world using the Dutch Internet Standards Platform @internet_nl@mastodon.nl to check web, dns and email security.

The results are in, and you won't like them.

https://www.linkedin.com/pulse/data-protection-agencies-dpa-should-have-good-right-per-thorsheim-ecbwe/

2

1

5

0