Erlend Oftedal

Security researcher at Crosspoint Labs. AppSec. Tweets are my own and do not express the opinion of my employer. OWASP. retire.js

[Erlend Oftedal @webtonull]

@CBSSportsGolazo @MikeGrella10 Respect to @MikeGrella10 for admitting his assessment was off and owning it.

[Erlend Oftedal @webtonull]

@bcherny Can you define code output? Is it in lines of code? Output tokens? Or new features so it's not tied to the actual size of the code base?

[BSides Oslo @OsloBSides]

New year, new me! There's a 2026 now, BSides Oslo 2026 that is. October 29th at Vulkan Arena. Information on tickets, CFP and all the rest to come.

[Erlend Oftedal @webtonull]

@ChrisLaubAI Which paper are you referring to?

[Erlend Oftedal @webtonull]

The call for papers for NDC Security ends tomorrow. Come do your talk in Oslo: https://t.co/IuoXodul7p

[Erlend Oftedal @webtonull]

What do you call unexpected vibe code written by accidentally clicking the link above a TODO in VSCode? (asking for a friend 😬)
Wild code? Shadow vibes? Schrödinger's code because you don't know it's there until you look? Spanish inquisition code because it wasn't expected?

[Erlend Oftedal @webtonull]

A DBA walks into a NOSQL bar, but turns and leaves because he couldn't find a table

[Erlend Oftedal @webtonull]

@albinowax Impressive!

[Erlend Oftedal @webtonull]

@taviso Best of luck with the new gig. Hope we continue to see the same awesome research 👍

[Erlend Oftedal @webtonull]

@FotMob @roysolberg So close

[Erlend Oftedal @webtonull]

@xssdoctor Here is an older version from quite some years ago:
https://t.co/tYLjh4w5eu

[BSides Oslo @OsloBSides]

It's 2025!
🗓️ We have a date: October 30th.
📢 We have a CFP: https://t.co/CfDfjo475O
🌐 We have a website: https://t.co/VgtP4ToCkn

[Erlend Oftedal @webtonull]

@Jhaddix Sure

[Erlend Oftedal @webtonull]

RIP Gene Hackman

[Erlend Oftedal @webtonull]

Reminder that the Call for Presentations for Sikkerhetsfestivalen (The Security Festival) is open. OWASP Oslo is hosting an AppSec track. Scroll down the page for English version:

https://t.co/QgFEp5srZi

[Thomas Ardal 🦄 elmah.io @ThomasArdal]

I've made a new Azure DevOps extension that runs Retire.js as part of a build pipeline. Retire.js will detect vulnerable JavaScript libraries in your code. All credits go to @webtonull for building this amazing scanner. Get the extension here: https://t.co/8n4VxBMTa6

[Erlend Oftedal @webtonull]

@ThomasArdal Is the source code available on github or similar?

[Ryan Chenkie @ryanchenkie]

⚠️ Developers, please be careful when installing Homebrew.

Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.

[Erlend Oftedal @webtonull]

@SpotifyCares It's no longer possible to remove/mute songs on Discover Weekly. Please bring this back. I appreciate the suggestions, but some of them are not so good (wrong language, wrong style, unwanted lyrics)