Frank Karlstrøm

developer, interested in performance, security, vulnerabilities, old stuff to learn

[Frank Karlstrøm @fjankk]

#atea #tp2b

[TRÄW🤟 @thatstraw]

Why are people from Norway so good at editing files in Linux?

Their ancestors are vi-kings.

[Frank Karlstrøm @fjankk]

Shameless self-promo: just got a new certification: ISO/IEC 27001 Senior Lead Implementer. 🥳

[Frank Karlstrøm @fjankk]

Written an article for Java-developers about xml Security #Java #xml #xxe https://t.co/7P0ONQmZjC

[Frank Karlstrøm @fjankk]

@hallny Kan være «litt» fuggly å få til rett signatur da for PS256, hvis man ikke kan endre algoritmen til «None» (som i gamle dager for easy JWT signature bypass

[Frank Karlstrøm @fjankk]

@hallny Her er python kode for å dekode en qr-kode (testet på norske sertifikat, funker som fjell men en minimal endring HC1->NO1). Burde være relativt enkelt å reversere for å lage en encoder for fake qr-kode som går igjennom kontroll https://t.co/unzfZsftDk

[Frank Karlstrøm @fjankk]

Old dogs CAN learn new tricks! Very nice way to start my weekend!!!!

#oscp #TryHarder
https://t.co/JAZh6i9mGY

[Frank Karlstrøm @fjankk]

It seems according to Adobe the SSRF I found was due to a misconfiguration on the customer server, thus my report was only informative, and not related to the CVE. Even though Adobe thanked me for the CVE... 🤷‍♂️

[Frank Karlstrøm @fjankk]

Adobe has released a new security bulletin, do particularly take note of CVE-2020-24444.
That is my finding!
A time-based blind Server Side Request Forgery, allowing for host and port scanning of internal servers from internet. #infosec #security
https://t.co/9kassdOqzC

[Frank Karlstrøm @fjankk]

Let me Find out if Adobe will disclose it, and Ill make a poc/blog post

[Frank Karlstrøm @fjankk]

@mgjesdal Like ille som �� forsøke å si at jeg er også i A (bygg/klasse) til noen andre på trøndersk. ÆEIAÆÅ

[Frank Karlstrøm @fjankk]

Oooof. Noen har ikke gjort jobben sin...
https://t.co/OUdrHWRFAz

https://t.co/H6Bf7src7Z

[Frank Karlstrøm @fjankk]

Omg, doing some origami when it’s moist and warm compared to winter and dry climate (using Airconditioner set to auto): the paper is much more malleable, didn’t know air humidity has such a huge influence!

[Frank Karlstrøm @fjankk]

@pati_gallardo TheEmperor

[Frank Karlstrøm @fjankk]

@0xprashant @egre55 Perhaps you should wait until the box is retired before publishing a write up

[Frank Karlstrøm @fjankk]

@mgjesdal @Skattenmin Såååå..... du må forplikte deg (uten betingelser) til å dekke tapet, (i et inntektsår) først da kan du få fradrag.... right? Hva er et eksempel på å forplikte seg til å dekke tapet uten betingelser? Hva betyr egentlig det jeg skrev?

[Frank Karlstrøm @fjankk]

What does it take to do a forensic investigation of a securitybreach? Usually a geek and a week.

[Frank Karlstrøm @fjankk]

@hallny @REMA1000 Ser ikke ut til at de egentlig har lært noenting siden siste brøler.
🙈🙉🙊

[Frank Karlstrøm @fjankk]

@hallny @NorPostlister @digi_no @bladetnordlys Var det ikke meningen at helsenorge skulle ha kontroll på dette? Amatørmessig!