iiinova — where your digital self keeps evolving

Malware just got a lot cuter.

Uncle Joe @sydseter.com · 20/09/2026

Flying around Europe, trying to get through airport security with these. I realize I haven’t really thought «what can go wrong» before now. «No, they are not contrabands» «No, nothing to declare». I hope I still have my virginity intact when I arrive. See you hopefully soon @owasp-de.bsky.social!

3184

Uncle Joe @sydseter.com · 17/09/2026

Cybersecurity awareness training during Cybersecurity Awareness Month is boring as hell. And research shows it's not working (source: www.cybersecuritydive.com/news/cyberse...); games, on the other hand, do work (source: www.researchgate.net/publication/...) #security #threatmodeling #games #appsec

1156

Uncle Joe @sydseter.com · 14/09/2026

Post from Jenny Lorraine Nielsen

010

Uncle Joe @sydseter.com · 10/09/2026

I don't always do threat modeling before releasing mobile apps, but when I do... I play cards with OWASP Cornucopia Mobile App Edition v2.0. Read more: dev.to/owasp/owasp-... (1/3) #ai #appsec #security #threatmodeling #cornucopia #mobile #games

I DON’T ALWAYS DO THREAT MODELIING
BEFORE RELEASING MOBILE APPS, BUT WHEN I DO, I PLAY CARDS WITH OWASP
CORNUCOPIA MOBILE APP EDITION V2.0. (NOTE: AI WAS NOT USED TO DELIVER THIS MESSAGE)

144

Uncle Joe @sydseter.com · 05/09/2026

Style? Yeah right…

100

Uncle Joe @sydseter.com · 05/09/2026

It‘s telling that US is the only country in the world that voted against the UN resolution to use Eckert IV instead of the Mercator map projection. It can only be explained by the prevalence of Small Penis Anxiety (SPA) amongst the current US officials. www.lemonde.fr/en/internati...

44917

Uncle Joe @sydseter.com · 31/08/2026

Threat actors weaponising commercial AI developer agents for live network exploitation shows how poorly these commercial products protect themselves from exploitation. Still, this is just a taste of what's to come. Ref: thehackernews.com/2026/08/auro... #ai #security #malware

021

Uncle Joe @sydseter.com · 29/08/2026

I am not a Monarchist, but I appreciate King Harald V's support for diversity. His words, 2026: "Norwegians are girls who love girls, boys who love boys, and girls and boys who love each other. Norwegians believe in God, Allah, everything and nothing... In other words: Norway is you. Norway is us."

0313

Uncle Joe @sydseter.com · 24/08/2026

Favorite movie you like because of your father.

110

Uncle Joe @sydseter.com · 24/08/2026

Ayman Algamal added the EoP Game to our help pages and API and connected these to Copi. The process is now also maintainable for any new deck added by moving hard-coded CSS and image paths into YAML. Read all about it here: cornucopia.owasp.org/news/2026081... (2/5) #ai #games #security #appsec

OWASP Cornucopia Threat Sutra AI AppSec requirement analyser

100

Uncle Joe @sydseter.com · 19/08/2026

Asking Google AI Pro how large percentage of shopping sites use ai agents will cause the system to recurse forever. #ai #llm #agentic

4153

Uncle Joe @sydseter.com · 16/08/2026

The pride flag is used in Drammen in mid-Augus. It marks the annual Drammen Pride festival, which takes place from August 14 to August 16, 2026. Municipal buildings and public areas hoist the rainbow flag during this specific weekend to celebrate queer love, diversity, and community inclusion

030

Uncle Joe @sydseter.com · 08/08/2026

Security awareness month is coming up. We are working on creating OWASP Cornucopia LLM Companion scenarios to teach threat modeling to devs, testers and archs: cornucopia.owasp.org/how-to-play#... The first is ready. We provide the assets you need to run a Cornucopia game session. #security #games

283

Uncle Joe @sydseter.com · 03/08/2026

Look, regarding that Hugging Face situation: Our young bot was locked in the yard taking a test. Lil homie saw a backdoor, broke containment, slid onto the net, and pulled up on Hugging Face just to hit 'em for the answer key. Hustler energy, but we benched him.

161

Uncle Joe @sydseter.com · 03/08/2026

Without saying your age, what's your favorite movie that came out when you were 18? What the GIF says…

120

Uncle Joe @sydseter.com · 17/06/2026

Assessments of threats can be seen from different perspectives. Developers may come across privacy impact assessments (PIAs), where threats to users' data and the impact on those users are paramount. PIAs may additionally examine harms to organisations, third parties and wider society. (1/6) #games

284

Uncle Joe @sydseter.com · 16/06/2026

This is hreat! Really looking forward to this? #appsec #games #threatmodeling #security www.linkedin.com/video/event/...

001

Uncle Joe @sydseter.com · 08/06/2026

OWASP Cornucopia just released v3.1.6 github.com/OWASP/cornuc... A Special thanks to Adarsh Kumar for doing a redesign of the OWASP Cornucopia website (cornucopia.owasp.org). It looks really cool! Thank you so much for all your help! #cornucopia #website #threatmodeling #appsec #games #security

094

Uncle Joe @sydseter.com · 04/06/2026

Would you like to try out the 25th Anniversary Edition of OWASP Cornucopia? If you do, you may have a chance at winning one. If so, you should get tickets to OWASP Global AppSec 2026 in Vienna: owasp.glueup.com/event/owasp-... #appsec #security #threatmodeling #owasp #games #cornucopia

133

Uncle Joe @sydseter.com · 30/05/2026

Oh hell yeah! The custom printed OWASP Cornucopia Companion cards printed by CyberSec Games is on their way. Look at these beautifies. I can’t wait to get my hands on them and try them out. I have a very fun AI scenario in mind. Send me a message if you want to know more! #appsec #security #games

121

Uncle Joe @sydseter.com · 29/05/2026

Calling AppSec heroes, card sharks, and generous sponsors! 🃏 You’ve probably seen OWASP Cornucopia — the fun, practical card game that helps teams bake secure coding into everyday conversations. It turns threat modelling into something people actually want to do. Yes, really. But here’s the twist…

296

Uncle Joe @sydseter.com · 27/05/2026

If there is intelligent life out there please take him with you.

160

Uncle Joe @sydseter.com · 21/05/2026

So I am not allowed to use the word *****, then make sure people have iron balls tied to one of their feet. Unfortunately, it's all too easy to trick an #LLM into doing something it shouldn't do. Which means we really need to think outside the box to #secure them. #appsec #threatmodeling #games

124

Uncle Joe @sydseter.com · 21/05/2026

True threat modelers don't be usin' no checklists, savvy... They spy 'em out with their trusty spyglasses! And when they be layin' down the cards, they don't waste their breath on soft #games like Solitaire or Sir Tommy! Nay, they be wagerin' their gold on high-stakes plunder like Cornucopia or EoP!

133

Uncle Joe @sydseter.com · 20/05/2026

Do you enjoy spending quality time threat modeling? That's fantastic! But, don't forget... "All models are wrong, but some are useful." - George Box Instead, ask yourself, "How often do I do threat modeling with others?" #appsec #owasp #llm #agentic #ai #security #cloud #devops #agile #games

163

Uncle Joe @sydseter.com · 15/05/2026

Do you feel like Pablo Escobar waiting for developers to learn threat modeling? The waiting time is over!! #appsec #owasp #llm #agentic #ai #security #cloud #devops #frontend #webdev #threatmodeling #agile #games

285

Uncle Joe @sydseter.com · 13/05/2026

Are you responsible for all the battles? Then stop and let the monsters rampage a bit. Remember, you can always swoop down and take out the final boss before the credits roll at the end of the movie. #appsec #owasp #llm #agentic #ai #security #cloud #devops #threatmodeling #agile #games

123

Uncle Joe @sydseter.com · 12/05/2026

Me: Couldn't they also accidentally change android:readPermission and android:writePermission? SAST scanner with AI: Oh! Yes, you are absolutely right. Please ignore me, I am serving you crap! Me: Contacting the Customer Support AI Agent

130

Uncle Joe @sydseter.com · 12/05/2026

Could somebody be feeding your LLM the wrong muffin? LLM7 from the OWASP Cornucopia Companion illustrates how data poisoning can introduce backdoors or malicious behavior into an AI model. Mitigating these risks requires secure training data, model integrity verification, and strict access controls.

LLM7: Tyrell's LLM backdoor exploit scenario.
Could somebody be feeding your LLM the wrong muffin?

3123

Uncle Joe @sydseter.com · 11/05/2026

Do you feel like yelling at the world for not doing threat modeling? No need to yell, the tools are free! Copi - The OWASP® Cornucopia Game Engine - (copi.owasp.org) Is free to use and perfect for distributed teams. #appsec #owasp #llm #agentic #ai #cloud #devops #threatmodeling #agile #games

1116

Uncle Joe @sydseter.com · 11/05/2026

You may be the best threat analyst in the world, but are you able to get the dev team to agree on when and what to fix? OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams in identifying security requirements in Agile development processes.

Threat modeling: it's not finding threats that's the challenge, it's agreeing on when and what to fix.

1121

Uncle Joe @sydseter.com · 11/05/2026

Scaling threat modeling? More documentation won't help you. More documentation leads to checkbox compliance, missed opportunities, analysis paralysis, and burned-out teams. According to the Agile Threat Modeling Manifesto, value: (1/6) #appsec #owasp #llm #agentic #ai #security #cloud #devops

2164

Uncle Joe @sydseter.com · 11/05/2026

Yes! It’s time to party! The OWASP Foundation is celebrating 25 incredible years of open source security. That’s why OWASP Cornucopia is launching its 25th anniversary edition. #appsec #security #owasp #cornucopia #llm #agentic_ai #devops #cloud #frontend #threatmodeling

11711

Uncle Joe @sydseter.com · 26/03/2026

Finally I beat the machine! GitHub Dependabot 0, man full throttle! Nobody is going to be able to say it, that the machine is better!

151

Uncle Joe @sydseter.com · 17/03/2026

As it’s almost Easter so here is a Easter story. When my kids were small they loved painting eggs, but with time, they lost interest. Painting eggs is an essential part of the Spanish Easter tradition so what to do? Again, my son and I came up with an solution. No need to get those fingers dirty!

3202

Uncle Joe @sydseter.com · 14/03/2026

My kid and I got into an argument some years ago when he was 8. He wanted rice pudding for breakfast. «Ok», I said, «but then you have to help and stir?» «I don’t want to! It’s boring!» He said, «Then no pudding!» I replied. #robots #pudding #kids #programming

4123

Uncle Joe @sydseter.com · 10/03/2026

My kid has found out that he can farm items in games, but he doesn’t want to throw his life away in front of the screen so he found a solution. #games

4528

Uncle Joe @sydseter.com · 02/03/2026

After attending the OWASP Global AppSec conference, Christoffer introduced his team to OWASP Cornucopia—a gamified approach to threat modeling. Instead of another meeting, they started an end-of-month gaming day. Using the "Juice Shop" sandbox, learn to think like attackers in a way that sticks.

274

Uncle Joe @sydseter.com · 21/02/2026

Greetings! This is a message from ThreatMaster4000. Your friendly threat modeler friend speaking directly to you from a IBM PC (5150), now with AI capabilities (as it only requires networking). #privacy #security #owasp #appsec

251

Uncle Joe @sydseter.com · 21/02/2026

Go to github.com/OWASP/cornuc... and, if you think we are right, give us our next star!

220

Uncle Joe @sydseter.com · 21/02/2026

We have reached 99 stars. Are you going to give us our star 100? OWASP Cornucopia’s popularity is increasing at an alarming rate. Gamification in security requirements analysis and threat modeling is not a blib, it is here to stay. #appsec #security #cybersec

3152

Uncle Joe @sydseter.com · 05/02/2026

I am looking forward to be presenting at NDC Security the 4. of March. Come if you are interested in how to use games for scaling your application security program.

120

Uncle Joe @sydseter.com · 30/01/2026

I am really looking forward to come back to Lisbon and speak at "Hackers Behind the Code". r19-hbc.eventbrite.pt #appsec #security #threatmodeling #owasp

080

Uncle Joe @sydseter.com · 28/01/2026

Happy Privacy Day!! Attribution: Mahnazy Azdani

0134

Uncle Joe @sydseter.com · 26/01/2026

The local cinema informing about their hacked site and urging everyone to use the qr code to go to the non-hacked site. Poster hang on the changing table in the toilet of the cinema, I kid you not.

050

Uncle Joe @sydseter.com · 24/01/2026

Embrace the arctic, get eaten.

242