Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Christian Folini

@christian-folini.ch
3.4K followers 308 following 290 posts

Web application security guy with a passion for OWASP's open source WAF projects and National Cyber Strategy. Maintains "Swiss Cyber Security" starter pack and cherishes his small collection of medieval helmets.

PostsRepliesMedia
Christian Folini @christian-folini.ch · 19/03/2026
Florian Schuetz from Swiss NCSC opening the @1ns0mn1h4ck.bsky.social conference: "Sovereignty is not autarky, sovereignty is freedom to choose." If you're around at the conference, come and say hello. Happy to talk.
031 3
Christian Folini @christian-folini.ch · 05/12/2025
With the rate @cloudflare.social goes down these days, they should totally invest in revamping their error page.
140 4
Christian Folini @christian-folini.ch · 05/12/2025
#react2shell (CVE-2025-55182) is detected by default by OWASP CRS 3 and CRS 4 alike. Rules in question are * 934100 #CRS3 and #CRS4 * 934130 CRS4 * 942550 CRS4 Test payload in graphic below. Other payloads can be tested via the public CRS sandbox. Kudos to Vincent-TW for the groundwork.
032 3
Christian Folini @christian-folini.ch · 25/11/2025
#ModSecurity / @owasp.org CRS engine puzzle! A solution has the potential to improve the performance across millions of servers.
010 1
Christian Folini @christian-folini.ch · 03/08/2025
Guess who's going to the circus tonight.
030 3
Christian Folini @christian-folini.ch · 29/06/2025
Another hour and we're ready. Deer shank on a spit.
030 3
Christian Folini @christian-folini.ch · 02/06/2025
OWASP awarded me with a distinguished lifetime member award last week. I am deeply thankful for this recognition and the support by the OWASP CRS team that made this possible.
050 5
Christian Folini @christian-folini.ch · 01/04/2025
Got my new sticker in the mail today. Here we go!
020 2
Christian Folini @christian-folini.ch · 24/03/2025
182 8
Christian Folini @christian-folini.ch · 13/03/2025
Mathias Peter kicking off @1ns0mn1h4ck.bsky.social 2025 conference today. #INSO25
120 2
Christian Folini @christian-folini.ch · 18/02/2025
After years of searching I finally found it.
1202 20
Christian Folini @christian-folini.ch · 08/02/2025
This explains a lot. #SBB
240 4
Christian Folini @christian-folini.ch · 01/02/2025
Only saying. Die super apps funktionieren in China. Es ist nicht auszuschliessen dass sie hier auch funktionieren. Vorzeitig abschreiben würde ich es deshalb nicht. Aber riskant ist es allemal.
210 2
Christian Folini @christian-folini.ch · 31/01/2025
This is me at my desk for my new mini-job: part-time librarian in the local community library. We have 5000 books in our collection, a team of 4, we're open 3 times a week and on appointment for the local schools and nurseries. bibliothek.kiesen.ch (No, I have no plans to revamp the website.)
0120 12
Christian Folini @christian-folini.ch · 26/01/2025
One of these days when Switzerland is almost unreal.
370 7
Christian Folini @christian-folini.ch · 16/12/2024
theyseeyourphotos.com is a an awareness service that takes a photo you _want to share_ and runs it through Google's AI to teach you what a photo can reveal about you. I tried it out with one of me. The bias is flattering for me, but I still find it creepy.
131 3
Christian Folini @christian-folini.ch · 13/12/2024
So there is a movie might at Folinis. What might be the film? Not too difficult to guess...
020 2
Christian Folini @christian-folini.ch · 04/12/2024
Notorious Swiss "Homeland Security Company" #Xplain is looking for a new CEO. Despite the leakage, the scandal and the bad press, security is a non-issue in the ad. Security is not part of the tasks of the CEO and no security experience whatsoever is needed. 🤦 www.linkedin.com/jobs/view/40...
430 4
Christian Folini @christian-folini.ch · 01/12/2024
The pleasures on a slow Sunday: blueskyroast.com What beats me about these sentiment analysis AI prompts: They take surprisingly little input, come up with a baseline and then the hallucinate the rest.
020 2
Christian Folini @christian-folini.ch · 01/12/2024
This is what happens when that random person in Nebraska gives up maintaining that crucial piece of a supply chain after years of going without any support from commercial integrators.
040 4
Christian Folini @christian-folini.ch · 01/12/2024
This is how I do the diff, loop over the delta and how I then send me a summary via email.
210 2
Christian Folini @christian-folini.ch · 28/11/2024
I came across a photo of this manual dating back to 1977. The PDP-11 compatible VAX-11 was the hot stuff at the time. Intriguing to see a female expert explaining it to a suit. This advertising approach ceased entirely when computers began to be exclusively marketed to men in the 1980s.
050 5
Christian Folini @christian-folini.ch · 26/11/2024
I'm discussing the idea behind the "Chaos Fortress" plugin for @owasp.org CRS (coreruleset.org) with more people. I started this for fun, but now I think it might actually work in prod. The basic idea is in the graph below. What do you think? Brilliant or idiotic? If idiotic, please tell me why!
100 1
Christian Folini @christian-folini.ch · 19/11/2024
I always saw teaching at the famous German #Linuxhotel as peak teaching experience. At last, I'm here, having a great time with six students eager to learn about #ModSecurity / OWASP CRS with the November rain being the only downside. Here is a photo from a better season.
020 2
Christian Folini @christian-folini.ch · 19/11/2024
000 0
Christian Folini @christian-folini.ch · 18/11/2024
Very happy with the release of "Chaos Fortress", an OWASP CRS plugin that attempts to break the feedback loop for attackers, effectively making adversarial machine learning way harder. First, I did this for fun. But now I think it might actually work. github.com/dune73/chaos...
031 3