iiinova — where your digital self keeps evolving

Per Thorsheim @thorsheim.bsky.social · 2h

A physical piece of Internet history is up for auction at Christie's. The worlds first and possibly only real-world implementation of RFC 1149: Standard for the transmission of IP datagrams on avian carriers onlineonly.christies.com/s/fine-print...

onlineonly.christies.com

Carrier Pigeon Internet Protocol

[WAITZMAN, David and the BERGEN LINUX USER GROUP.] One printed IP/ICMP "ping" packet sent by carrier pigeon per RFC 1149.Small scroll of paper, 41 x 210 mm. Rolling creases visible from when attached ...

021

Per Thorsheim @thorsheim.bsky.social · 23/09/2026

Det blir #Halloween Meetup hos Gritera i Oslo torsdag 29 oktober, med oppmøte fra kl 16:30. Påmelding: send melding til meg. Som vanlig har vi en dedikert gruppe på Signal. Vi har en *skremmende* lyntale på plass allerede, men ønsker å få inn flere forslag.

2 scary halloween pumpkin heads with glowing yellow light inside of them.

100

Per Thorsheim @thorsheim.bsky.social · 22/09/2026

Watching the orange monkey on stage in the UN. Can't wait for the midterms.

010

Reposted by Per Thorsheim

Report URI @report-uri.bsky.social · 22/09/2026

We’ve rolled out Device Bound Session Credentials to 100% of Report URI logins. 🔐 67.7% of our active sessions are already device-bound, making this what we believe to be one of the first production DBSC deployments outside Google. Here’s how we did it: blog.report-uri.com/we-rolled-ou...

blog.report-uri.com

We rolled out Device Bound Session Credentials to every Report URI login

Since 1st September 2026, every single login to Report URI has been offered a Device Bound Session Credential. That's 100% of our users, on the live site, all day, every day. As far as we can tell, t...

021

Reposted by Per Thorsheim

jon greig @jgreig.bsky.social · 15/09/2026

Law enforcement agencies in Norway are investigating whether Norwegian telecom Telenor aided crimes against humanity through its work providing customer data to the brutal military regime currently governing Myanmar therecord.media/norway-inves...

therecord.media

Norway announces investigations into telecom Telenor’s work with Myanmar junta

Oslo-based Telenor potentially enabled crimes against humanity and violated sanctions in its dealings with the military regime that took over Myanmar in 2021, Norwegian authorities said.

0289

Per Thorsheim @thorsheim.bsky.social · 15/09/2026

Meetup hos Gritera i Oslo torsdag 29 oktober. Halloween 👻 🎃 tema! Påmelding kommer. Forslag til lyntaler sendes til meg. Tema: skrekkhistorier fra virkeligheten. 😈 Takk til Nina Pettersen & Brede Trollsås!

010

Per Thorsheim @thorsheim.bsky.social · 09/09/2026

Today I did my presentation «Praise to the few and fury to those without: convincing Norway to do RPKI ROA & ASPA» at NONOG-8 in Oslo. Conference program & recording available here: nonog.net/events/nonog...

nonog.net

NONOG-8 / NIX-2026 – NONOG

011

Per Thorsheim @thorsheim.bsky.social · 06/09/2026

No @adobe.com, I won't install your spyware intended to check if I am running cracked versions of your software. This for sure isn't to protect me from potential malware! Nag me again and my current license for Lightroom will end. Period. I've moved on to other alternatives for everything else.

030

Per Thorsheim @thorsheim.bsky.social · 04/09/2026

Please mr orange, do not come to Oslo for the king's funeral. This isn't your funeral, and we don't want this to be a "show" for you.

000

Per Thorsheim @thorsheim.bsky.social · 03/09/2026

AS5619 (my employer) now has valid BGP RPKI ASPA in place. Most do not know, understand or care. Me? Celebrating all alone.

040

Per Thorsheim @thorsheim.bsky.social · 02/09/2026

Hey Americans & Canadians! It seems Apple Maps have caved to Trump's demand for "Lake Amerika", but only in the US. (screenshot from 08:06 Sept 2, 2026) Best regards from Norway

010

Reposted by Per Thorsheim

Brian Honan @brianhonan.bsky.social · 29/08/2026

Happy Skynet day to all those who celebrate

6352291727

Per Thorsheim @thorsheim.bsky.social · 20/08/2026

November 2025 sjekket jeg dns/web/epost sikkerhet hos de 13 selskapene som da var godkjent av NSM for hendelseshåndtering. Nå er det 15 på listen, og det var på tide å ta en ny sjekk. www.linkedin.com/pulse/godkje...

linkedin.com

Godkjent av NSM for hendelseshåndtering - del 2

28 November 2025 skrev jeg artikkel her på Linkedin om DNS, Web og epost sikkerhet hos de 13 selskapene som på det tidspunktet var godkjent gjennom Nasjonal sikkerhetsmyndighet sin kvalitetsordning fo...

000

Reposted by Per Thorsheim

Joseph Lorenzo Hall, PhD @josephhall.org · 15/08/2026

Key takeaways from JP Aumasson (@veorq) at Black Hat Asia on realistic PQC migration: Symmetric ciphers like AES are safe, but public key encryption faces Harvest Now, Decrypt Later risks today. Prioritize TLS and KEMs over signatures. youtu.be/_M0of-6aLpk 1/3

Conference presenter at Black Hat Asia 2026 introduces an agenda slide titled "Post-quantum cryptography" listing: What is PQC?; NIST standards and deadlines; performance trade-offs; regional PQC initiatives; PQ HTTPS adoption, accompanied by a white cat image.

131

Per Thorsheim @thorsheim.bsky.social · 13/08/2026

Voss herad bruker Microsoft for epost, og får 100% score på DNS & epost sikkerhet. Politiets IT-enhet (politiet) får bare 75% score. På Personverndagene 2026 14 -16 september holder jeg kurs om DNS & epost sikkerhet. Sjekk ut fullt program og meld deg på her: personverndagene.no

personverndagene.no

Personverndagene 2026 – Norges største konferanse for personvern

Personverndagene 2026 samler nærmere 400 personverneksperter til faglige foredrag, workshops og nettverksbygging i Trondheim 14.–16. september.

010

Per Thorsheim @thorsheim.bsky.social · 12/08/2026

Finishing my analysis on BGP RPKI ROA & ASPA deployments across entire RIPE.net coverage area for 2 upcoming talks. Also: running Claude to better understand / figure out the BGP vulnerabilities @spacerog.bsky.social, @weld.bsky.social & rest of L0pht warned about back in May 1998. 🤩

131

Per Thorsheim @thorsheim.bsky.social · 06/08/2026

A software PTZ controller for up to 4 cameras, usable from Mac, iPad and iPhone — like a hardware PTZ joystick controller, but on your screens. First version. Small node server on mac/linux, then use any browser on any device for control and video preview. github.com/thorsheim/vP...

github.com

GitHub - thorsheim/vPTZcontroller: Software PTZ controller for OBSBOT Tail Air / Tail 2 cameras — VISCA-over-IP bridge + touch web control surface for Mac/iPad/iPhone

Software PTZ controller for OBSBOT Tail Air / Tail 2 cameras — VISCA-over-IP bridge + touch web control surface for Mac/iPad/iPhone - thorsheim/vPTZcontroller

000

Reposted by Per Thorsheim

MeidasTouch @meidastouch.com · 04/08/2026

Stolen valor from Mr. Bone Spurs. An insult to every man and woman who has worn the uniform.

2614160184362

Reposted by Per Thorsheim

Dwayne McDaniel @mdwayne-real.bsky.social · 05/08/2026

The Synthetic Insider: Securing Non-Human Identities in Cloud Workflows Mackenzie Jackson #BSidesLV 2026 #PasswordsCon

001

Reposted by Per Thorsheim

Dwayne McDaniel @mdwayne-real.bsky.social · 04/08/2026

#BSidesLV 2026 #PasswordsCon Criminal Hijacking: Profiling Threat Actors engaged in session takeover with Infostealer Logs Eric Clay and Eric Boivin

001

Reposted by Per Thorsheim

Dwayne McDaniel @mdwayne-real.bsky.social · 04/08/2026

#BSidesLV 2026 #PasswordsCon My email address is an API key? from Joe Leon

001

Reposted by Per Thorsheim

Dwayne McDaniel @mdwayne-real.bsky.social · 04/08/2026

#BSidesLV 2026 #PasswordsCon The Dots Do Matter: Gmail's Invisible Blindspot from Keren Elazari

001

Reposted by Per Thorsheim

Dwayne McDaniel @mdwayne-real.bsky.social · 04/08/2026

#BSidesLV 2026 Last minute change up, I am going to be presenting a 3rd talk TODAY at noon as part of #PasswordsCon Come see "From Pets To Cattle To Agents: Evolving Identity And Security For Workloads" You will not want to miss it!!

001

Per Thorsheim @thorsheim.bsky.social · 01/08/2026

Linkedin (still) promoting the use of their AI tools for different purposes while also introducing an option for reporting ads and posts as AI slop is … well… I really do not know how to describe it. 🤷

011

Reposted by Per Thorsheim

Rachel Tobac @racheltobac.bsky.social · 30/07/2026

The new “⚠️Seems like AI slop” button on LinkedIn is sending me into orbit lmao

1419735

Reposted by Per Thorsheim

Dan Goodin @dangoodin.bsky.social · 30/07/2026

A quantum-resistant cryptography algorithm that was under consideration to become an official US standard has been taken out of the running after an Anthropic security model helped find a flaw that rendered it broken. arstechnica.com/security/202...

arstechnica.com

Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission

HAWK withstood years of testing that had yet to uncover a fatal weakness found through Mythos.

0235

Per Thorsheim @thorsheim.bsky.social · 29/07/2026

I will do a talk titled "Praise to the few and fury to those without: convincing Norway to do RPKI ROA & ASPA" at NONOG-8 in Oslo on September 9. I sincerely hope to see people from all Norwegian ISPs or organisations handling BGP towards the Internet in the room. nonog.net/events/nonog...

000

Per Thorsheim @thorsheim.bsky.social · 23/07/2026

#PasswordsCon is coming to Munster Technological University in Cork, Ireland, December 8-9! Additionally our Chatham house rule day will be on December 7, while the Cyber Research Conference Ireland (CRCI) will be at the same location on December 10. Info & more: events.mtu.ie/index.cfm?pa...

events.mtu.ie

MTU Events -

012

Reposted by Per Thorsheim

BSides Las Vegas @bsideslv.org · 11/07/2026

The BSides Las Vegas schedule is out. We have a lot of talks across several tracks this year. All the details are online at: bsideslv.org/schedule

069

Reposted by Per Thorsheim

Gale Sinatra @galesinatra.bsky.social · 27/06/2026

I think we just passed oops.

451173255801

Reposted by Per Thorsheim

Stop Hacklore! @hacklore.bsky.social · 26/06/2026

Hacklore spreads through word of mouth as much as it does more official channels. Fight back against zombie advice. 🧟‍♀️ Send the hacklore.org website to at least two friends today so they can learn what really keeps accounts and devices safe! 🔐

At a bar, a zombie tells another patron to not use public wi-fi. The other person is wearing a hacklore.org t-shirt.

1105

Per Thorsheim @thorsheim.bsky.social · 23/06/2026

Skriv en falsk pinkode på betalingskortene dine. Da kan du lure skurkene som stjeler dine kort, varsle bankene og redde pengene dine. Enkelt og veldig lurt!

110

Per Thorsheim @thorsheim.bsky.social · 23/06/2026

På #Personverndagene 2026 skal jeg holde kurs for å vise hvordan man kan gratis teste internett sikkerheten for egen organisasjon, leverandører og andre. Risiko vil bli forklart, nødvendige tiltak blir gjennomgått, og du får en sjekkliste med det du trenger til jobben. personverndagene.no

030

Per Thorsheim @thorsheim.bsky.social · 18/06/2026

Post-kvante Kryptografi (PQC) er fremtidens sikring av data i møte med trusselen fra kvantedatamaskiner. En god del norske nettsteder har allerede støtte for dette, i den grad det er mulig å sette opp. Jeg har sjekket! thorsheim.net/pqc/

110

Reposted by Per Thorsheim

JonZoidberg @jonzoidberg.xyz · 17/06/2026

All you have to do is change the date.

Donald J. Trump @realDonaldTrump

X.com

The deal with Iran will go down as one of the most incompetent ever made. The U.S. lost on virtually every point. We just don't win anymore!

9:35 PM 9/2/15 From Manhattan, NY

35944231

Per Thorsheim @thorsheim.bsky.social · 16/06/2026

I'm sorry, but whenever I hear or see discussions about tactics etc in the FIFA World Cup on national news, this is what I think the reality actually is. Also: I seriously do not take any interest whatsoever in football.

010

Reposted by Per Thorsheim

Katie Moussouris (she/her/she-hulk/she-ra)🌻 @k8em0.bsky.social · 15/06/2026

I wrote about what was actually in that #Fable guardrail bypass research paper, and why it should never have triggered an #AI model export control. We can't export control our way to cyber resilience. So many tshirt ideas. www.lutasecurity.com/post/the-fab...

me wearing a black tshirt with pink writing.
Front: fix this code

me wearing a black tshirt with pink writing.
Back: this shirt is a munition

711635

Per Thorsheim @thorsheim.bsky.social · 03/06/2026

Jeg viste spoofing i 2019 og forklarte mulighetene og konsekvensene gjennom en rekke foredrag, artikler og mediesaker, som i tillegg til Norge også dekket Sverige og Danmark. Så kommer Harrison Sand & NRK, BOOM! *IGJEN* Jeg har kommentert til NRK. www.nrk.no/norge/sarbar...

nrk.no

Sårbarhet avdekket: Telia og Ice kunne misbrukes i spoofingforsøk

To av Norges største teleselskaper hadde en feil som gjorde det mulig å tyvlåne andres telefonnummer.

030

Per Thorsheim @thorsheim.bsky.social · 03/06/2026

Protip: add your name, address, alternative phone number & email to the lockscreen of your phone! In case you forget it somewhere, it will be so much easier for others to return the phone to you.

001

Per Thorsheim @thorsheim.bsky.social · 03/06/2026

github.com/thorsheim/lo... A tiny, private, browser-based tool to turn any photo into a phone lockscreen that shows who the phone belongs to — so a lost or misplaced phone can find its way back to you. Everything runs locally in your browser. No image is ever uploaded — there is no server.

github.com

GitHub - thorsheim/lockscreen-generator

Contribute to thorsheim/lockscreen-generator development by creating an account on GitHub.

150

Per Thorsheim @thorsheim.bsky.social · 03/06/2026

Praktisk tips før du skal ut på tur: legg til kontaktinfo på telefonens låseskjerm! AI genererte bilder av katt og hund. Mia er helt ekte, bilde brukt med tillatelse.

000