tag:blogger.com,1999:blog-25905727344058472Tue, 10 Mar 2026 10:52:13 +0000CertificationTips and TricksMCTSASP.NETMCPDProgrammingC#Presentation2010Download.NET 4.0Beta2008MCITPSQL ServerSecurityCodeExamsVisual StudioWindows FormsmvpbuzzTroubleshooting70-43370-50570-53670-56270-515AttackSharepoint70-528Dynamic ControlsSilverlightUser groupsBing MapsSQLWindows 7AdministrationMCMMVPNDCOsloPersonalReporting ServicesVS11AzureBloggerDDDDDDNorthErrataNNUGR2VHDitdevcon70-43170-45470-51670-56370-566ADO.NETAmazonCloudCommunityComputerHardwareJavascriptLive MeetingMTUGNDC2010NNUGOnlinePerformance PointReport ViewerS3SSDVistaWSSWebcastsWifiPineapple;SecurityWindows 8Windows Live WriterWindows Mobile 6.5Windows Serverdddscotdddswswetuggtechdaysnlwin8osloTopics that I like .. ASP.NET, DevSec, Weird security stuffhttp://www.certsandprogs.com/noreply@blogger.com (Anonymous)Blogger209125tag:blogger.com,1999:blog-25905727344058472.post-8814492792703874760Sun, 15 Apr 2018 08:00:00 +00002018-04-17T11:09:31.639+02:00On Friday, I published my findings into a data leak of citizen data by a company in Thailand. The Register also picked up on this story and the reaction on Twitter was relatively low. However on Saturday, this all changed. My Twitter mentions feed was all in Thai and my DMs were filled with people asking for their data and what they should do. To save my sanity and stop the spread of http://www.certsandprogs.com/2018/04/faq-i-true-mart-data-leak.htmlnoreply@blogger.com (Anonymous)5tag:blogger.com,1999:blog-25905727344058472.post-7301433367079151151Fri, 13 Apr 2018 07:12:00 +00002018-04-16T10:11:30.383+02:00AmazonS3SecurityUpdate: 14-04-2018 : True Corp have issued a statement and clarification that this only affected their subsidiary I True Mart. Details in Thai  Back in January 2018 while at NDC London, Scott Helme introduced me to an interesting new technique for finding Amazon S3 buckets, Using the certificate transparency logs that are created when someone creates a new certificate, you http://www.certsandprogs.com/2018/04/another-telco-is-failing-at-security.htmlnoreply@blogger.com (Anonymous)5tag:blogger.com,1999:blog-25905727344058472.post-5926117985805170473Sun, 03 Jan 2016 18:43:00 +00002016-01-03T20:09:19.280+01:00WifiPineapple;SecurityWith the new white user interface for the WiFi Pineapple, there are some things that are not quite apparent when you are setting it up. So here is my quickstart guide to configuring the Pineapple with Windows (10 in my case) Setting up your network Once you plug in your Pineapple, Windows begins to install the necessary drivers and set itself up to use the device. Once it is installed, the http://www.certsandprogs.com/2016/01/configuring-wi-fi-pineapple-nano.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-473564560739661404Fri, 01 Jan 2016 14:12:00 +00002016-01-01T17:04:50.008+01:00SecurityIf you have seen any of my security presentations or attended any security talks hosted by Troy Hunt, you will be familiar with the Wi-Fi Pineapple. This is a small rogue access point that you can deploy within a couple of minutes and cause havoc with the Wi-Fi connections of the people around you. Hak5, the creators of the Pineapple have now updated their product line with the new Wi-Fi http://www.certsandprogs.com/2016/01/first-look-at-wi-fi-pineapple-nano.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-3477254385628991430Thu, 24 Sep 2015 09:51:00 +00002015-09-24T11:51:15.002+02:00itdevconLast week I presented my Security Tester’s Toolkit talk or as I subtitled it “How to get arrested by doing stupid stuff!” at IT/DevConnections in Las Vegas. Here are the list of tools and resources that I used or mentioned and also by request the hardware that I demonstrated during the the talk Recon CVE Database National Vulnerability Database Exploit Database by Offensive Securityhttp://www.certsandprogs.com/2015/09/a-security-testers-toolkit.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-7174363789110540498Tue, 15 Sep 2015 21:45:00 +00002015-09-15T23:45:00.143+02:00itdevconAs this is being posted, I will be just finishing up my session at IT DevConnections on Website Fuzziness. This talk is how to hack your own website to discover potential flaws and vulnerabilities before someone else does. As promised, here are the resources for the tools that I showed during this talk Demo sites These sites can be loaded locally or attacked without permission. You can use http://www.certsandprogs.com/2015/09/website-fuzziness-devconnections.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-5534258249352986795Wed, 26 Aug 2015 11:14:00 +00002015-08-26T13:14:19.343+02:00A while back, I posted about the dangers of open FTP services that a lot of home routers provide. The more I thought about, the more I realised that it wasn’t visible to people on how to find out if they were sharing files via FTP without going to sites such as Shodan or FileMare. That is why I created Am I Sharing Stuff and it is now live at https://www.amisharingstuff.com so let me tell you http://www.certsandprogs.com/2015/08/introducing-am-i-sharing-stuff.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-5413769932771418636Fri, 19 Jun 2015 16:34:00 +00002015-06-19T18:34:29.631+02:00NDCOsloAt my NDC Oslo talk today, I showed how to downgrade HTTPS to HTTP on Skandiabanken. It was with the kind permission of the people at Skandiabanken and I would like to express my thanks for that. The attack I used is a very narrow attack and doesn’t not compromise the bank’s security because of the excellent security that they have implemented but it does show the vulnerability of the underlyinghttp://www.certsandprogs.com/2015/06/a-thank-you-to-skandiabanken.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-3324802903705302739Fri, 19 Jun 2015 09:30:00 +00002015-06-19T11:30:03.363+02:00NDCOsloHere are the resources from my talk “A Pentester’s Toolkit” which I presented today at NDC 2015. Thanks to all of you who came to my talk and I hope you got something out of it. Since there was a lot of tools shown, I didn’t post a link to them in the session but instead they are listed here in order of appearance in the talk. Web Links CVE Database National Vulnerability Database http://www.certsandprogs.com/2015/06/ndc-2015session-resources.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-6261734154053230352Fri, 27 Feb 2015 09:19:00 +00002015-02-27T14:04:19.554+01:00DISCLAIMER: This is all a personal reflection of my experiences and thoughts in relation to being on ONE agenda committee. It does not reflect any of the views of any companies or any other committees etc. I am writing it to provide some help to aspiring speakers who are looking to improve their abstracts and possible their acceptance rate. TL;DR; Writing abstracts is hard. Write the abstract ashttp://www.certsandprogs.com/2015/02/make-me-offer-i-cant-refusewriting.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-4405726670525049895Mon, 02 Feb 2015 21:38:00 +00002015-02-02T22:38:22.393+01:00swetuggEarlier today (02-Feb) I presented at the newly minted Swetugg conference in Stokholm, Sweden. This was my second time in Sweden presenting and as always, it is a lot of fun with the Swedish developer community. Many thanks for the Swetugg committee for inviting me over and letting me wreak havoc with the attendees! I had the last time slot of the day and the session was the old reliable http://www.certsandprogs.com/2015/02/swetugg-resources.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-3641910155072486916Sun, 28 Sep 2014 19:52:00 +00002014-09-28T22:39:53.058+02:00SecurityThe world has gone very digital and we now store a massive amount of data on our phones, our laptops and other devices that are prone to being lost, dropped or drowned. To combat this fear of data loss, a growing number of people are buying home NAS (network attached storage) solutions. These little boxes sit in the corner and usually have software that you can install on your computer to http://www.certsandprogs.com/2014/09/showing-your-nas-to-world.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-2979203489099536381Wed, 16 Apr 2014 14:10:00 +00002014-04-16T16:10:52.610+02:00techdaysnlThanks to all that came to my session at Defensive Programming. It was great to have such an interactive audience. Code download: Here The excellent haveibeingpwnd.com by Troy Hunt ASP.NET Resources • OWASP Top 10 by Troy Hunt - http://www.troyhunt.com/2011/12/free-ebook-owasp-top-10-for-net.html • Basic Security Practices for Web Applications - http://msdn.microsoft.com/en-us/library/http://www.certsandprogs.com/2014/04/techdays-nl-2014-resources-part-1.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-612596143089904089Thu, 13 Jun 2013 15:00:00 +00002013-06-13T17:00:37.254+02:00NDCOsloThanks to all who came to my session at NDC. The following is the list of resources that I suggested at the end of my talk ASP.NET Resources • OWASP Top 10 by Troy Hunt - http://www.troyhunt.com/2011/12/free-ebook-owasp-top-10-for-net.html • Basic Security Practices for Web Applications - http://msdn.microsoft.com/en-us/library/zdh19h94(v=vs.100).aspx • ASP.NET MVC Security - http://http://www.certsandprogs.com/2013/06/defensive-programming-101-at-ndc-2013.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-3644363078191370399Tue, 16 Oct 2012 06:38:00 +00002012-10-16T08:38:24.884+02:00DDDNorthAt the end of my talk at DDD North 2 there was a massive amount of URLs for people to reference later. Here is a copy of all of those links ASP.NET Resource •Web session management security - http://www.isecpartners.com/files/web-session-management.pdf •OWASP Top 10 by Troy Hunt - http://www.troyhunt.com/2011/12/free-ebook-owasp-top-10-for-net.html •ASP.NET Security Guidance - http://http://www.certsandprogs.com/2012/10/ddd-north-2-resources.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-2321028081191568630Tue, 10 Jul 2012 12:07:00 +00002012-07-10T14:08:26.430+02:00Tips and TricksTroubleshootingWhoa, that’s a long title! This morning, I was asked to check our System Center Service Manager portal as it wouldn’t load at all. The error was the banal Internet Explorer cannot display the webpage. There were a few issues that had to be sorted once I read through the event logs. I sorted them and thought, no problem, the portal should be running again and tried it. IE did its usual spinning http://www.certsandprogs.com/2012/07/fixing-scsm-systemsecuritycryptographyc.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-8690796471196593560Tue, 29 May 2012 12:55:00 +00002012-05-29T14:55:11.013+02:00dddswPresentationUser groupsOn Saturday 26th I presented Defensive Programming 101 at DDD Southwest. As you may or may not be aware, the Developer Developer Developer or DDD brand of events are free one day events for the community by the community. Speakers submit their sessions and the attendees decide which ones they would like to see. The sessions with the most votes make it into the conference. This was my fourth DDDhttp://www.certsandprogs.com/2012/05/dddsw-roundup-and-resources.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-1761094690960276670Mon, 21 May 2012 10:00:00 +00002012-05-21T12:00:06.886+02:00AzuremvpbuzzTips and TricksA while back I toyed with the idea of moving all my blog assets (images, downloads, etc) over to a CDN just as a proof of concept and to show how it could be done and as a very handy way to get inspiration for a blog post. This evening I finally got around to it. And this post details how to do it. So first a few basic things about the whole concept of a CDN. What is a CDN? A Content Delivery http://www.certsandprogs.com/2012/05/using-azure-cdn.htmlnoreply@blogger.com (Anonymous)4tag:blogger.com,1999:blog-25905727344058472.post-6262182993947015487Thu, 03 May 2012 11:45:00 +00002012-05-03T13:45:00.411+02:00win8osloToday I presented on the new features in Visual Studio 11 as part of the Windows 8 Developer Day in Oslo The resources slide is replicated here Project round tripping - http://bit.ly/wZWBeo Testing Frameworks - http://bit.ly/ABwv99 New features in WebMatrix - http://bit.ly/zc5fLc What’s new in VS11 Beta - http://bit.ly/tAUGQV What’s new in ASP.NET 4.5 - http://bit.ly/qSJhJv If http://www.certsandprogs.com/2012/05/windows-8-developer-day.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-6004590071180153838Sun, 25 Mar 2012 18:55:00 +00002012-05-19T00:01:49.686+02:00BetaCodeDownloadmvpbuzzTips and TricksVS11Continuing on from my previous post on the best bits of Visual Studio 11, these are the demos that I showed as part of that talk. Testing integrationAs part of the new test runners integration, this demo shows how to run different testing frameworks easily within the same project. To show the testing frameworks in  Unit Test Manager windows, you will need to install the xUnit.net test http://www.certsandprogs.com/2012/03/best-of-vs11-talk-from-dev11.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-2601180540519519751Thu, 22 Mar 2012 11:17:00 +00002012-03-22T12:22:10.544+01:002010BetaTips and TricksVisual StudioVS11Windows 8As part of my talks on VS11, I wanted to show some of the new templates that are shipped out of the box in Dev11 (VS11). As I detailed in my previous post, the new templates are only available when you are running on Windows 8. This posed a bit of a dilemma because I was also doing a session on building a hybrid Windows Azure application. The Azure tooling story for VS11 is that it will be http://www.certsandprogs.com/2012/03/visual-studio-2010-vs11-side-by-side-on.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-1367336017235147632Tue, 20 Mar 2012 20:59:00 +00002012-03-20T21:59:01.120+01:00BetamvpbuzzNNUGTips and TricksVisual StudioVS11This evening I have just finished a talk on the best bits of the new VS11 beta entitled turned your Web Development up to 11 (thanks to Glenn Henriksen for the inspiration). Coincidently Scott Hanselman, also published a post today while I was speaking with some of the stuff that I was talking about. Anyways, here is a quick recap of the session for those that missed it. The new IDE The new http://www.certsandprogs.com/2012/03/best-of-vs11-talk-from-dev11-launch.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-7798610594933973235Mon, 16 Jan 2012 07:53:00 +00002012-01-16T08:53:14.212+01:00MVPmvpbuzzNNUGNNUGOnlineLast year I ran a series of online Live Meetings under the brand NNUG Online. NNUG Online was an idea I had on trying to get around the issue of how to get more international speakers to the local Norwegian .NET User Groups. One of the benefits of MVP program is a Live Meeting account so I used that to host these meetings and from there, the issue was to find speakers. Through the magic of http://www.certsandprogs.com/2012/01/request-for-speakers-nnug-online.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-8268968140977717490Fri, 14 Oct 2011 11:44:00 +00002011-10-14T13:44:54.514+02:00CommunitymvpbuzzOn the 6th of September I travelled to Oslo to attend the first day of TechDays 2011, the new brand for the TechNet and MSDN Live events. It was held in the Clarion Hotel in Gardemoen which made it very handy to get in an out the same day. There was a mixture of tracks covering subjects like Web, BI, Cloud, and Client. It was a really interesting day and I got to the following sessions http://www.certsandprogs.com/2011/10/techdays-2011-review.htmlnoreply@blogger.com (Anonymous)0tag:blogger.com,1999:blog-25905727344058472.post-3233322045076996867Wed, 12 Oct 2011 11:24:00 +00002011-10-12T13:29:41.852+02:00MVPmvpbuzzPersonalTime for the obligatory MVP post. On the 1st of October this year, I was waiting for notification of whether or not I was going to be renewed as a Microsoft Most Valuable Professional. The process is simple. If you make the grade you get a nice congratulatory email and if you don’t, well you don’t get any email. I would be lying if I said I wasn’t a bit apprehensive about it and at around http://www.certsandprogs.com/2011/10/2011-mvp-aspnetiis.htmlnoreply@blogger.com (Anonymous)1