Uncle Joe
@sydseter
Co-leader OWASP Cornucopia. If you like what we do for open source, visit our code repository and give us a star ⭐ 🌈 «Difference is of the essence of humanity» 🦄 – John Hume #appsec #owasp #cornucopia #threatmodeling
The pride flag is used in Drammen in mid-Augus. It marks the annual Drammen Pride festival, which takes place from August 14 to August 16, 2026. Municipal buildings and public areas hoist the rainbow flag during this specific weekend to celebrate queer love, diversity, and community inclusion
Look, regarding that Hugging Face situation: Our young bot was locked in the yard taking a test. Lil homie saw a backdoor, broke containment, slid onto the net, and pulled up on Hugging Face just to hit 'em for the answer key. Hustler energy, but we benched him.
Without saying your age, what's your favorite movie that came out when you were 18? What the GIF says…
Assessments of threats can be seen from different perspectives. Developers may come across privacy impact assessments (PIAs), where threats to users' data and the impact on those users are paramount. PIAs may additionally examine harms to organisations, third parties and wider society. (1/6) #games
This is hreat! Really looking forward to this? #appsec #games #threatmodeling #security www.linkedin.com/video/event/...
OWASP Cornucopia just released v3.1.6 github.com/OWASP/cornuc... A Special thanks to Adarsh Kumar for doing a redesign of the OWASP Cornucopia website (cornucopia.owasp.org). It looks really cool! Thank you so much for all your help! #cornucopia #website #threatmodeling #appsec #games #security
Would you like to try out the 25th Anniversary Edition of OWASP Cornucopia? If you do, you may have a chance at winning one. If so, you should get tickets to OWASP Global AppSec 2026 in Vienna: owasp.glueup.com/event/owasp-... #appsec #security #threatmodeling #owasp #games #cornucopia
Calling AppSec heroes, card sharks, and generous sponsors! 🃏 You’ve probably seen OWASP Cornucopia — the fun, practical card game that helps teams bake secure coding into everyday conversations. It turns threat modelling into something people actually want to do. Yes, really. But here’s the twist…
So I am not allowed to use the word *****, then make sure people have iron balls tied to one of their feet. Unfortunately, it's all too easy to trick an #LLM into doing something it shouldn't do. Which means we really need to think outside the box to #secure them. #appsec #threatmodeling #games
True threat modelers don't be usin' no checklists, savvy... They spy 'em out with their trusty spyglasses! And when they be layin' down the cards, they don't waste their breath on soft #games like Solitaire or Sir Tommy! Nay, they be wagerin' their gold on high-stakes plunder like Cornucopia or EoP!
Me: Couldn't they also accidentally change android:readPermission and android:writePermission? SAST scanner with AI: Oh! Yes, you are absolutely right. Please ignore me, I am serving you crap! Me: Contacting the Customer Support AI Agent
Could somebody be feeding your LLM the wrong muffin? LLM7 from the OWASP Cornucopia Companion illustrates how data poisoning can introduce backdoors or malicious behavior into an AI model. Mitigating these risks requires secure training data, model integrity verification, and strict access controls.
You may be the best threat analyst in the world, but are you able to get the dev team to agree on when and what to fix? OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams in identifying security requirements in Agile development processes.
Yes! It’s time to party! The OWASP Foundation is celebrating 25 incredible years of open source security. That’s why OWASP Cornucopia is launching its 25th anniversary edition. #appsec #security #owasp #cornucopia #llm #agentic_ai #devops #cloud #frontend #threatmodeling
Finally I beat the machine! GitHub Dependabot 0, man full throttle! Nobody is going to be able to say it, that the machine is better!
As it’s almost Easter so here is a Easter story. When my kids were small they loved painting eggs, but with time, they lost interest. Painting eggs is an essential part of the Spanish Easter tradition so what to do? Again, my son and I came up with an solution. No need to get those fingers dirty!
My kid and I got into an argument some years ago when he was 8. He wanted rice pudding for breakfast. «Ok», I said, «but then you have to help and stir?» «I don’t want to! It’s boring!» He said, «Then no pudding!» I replied. #robots #pudding #kids #programming
