Halvor Sakshaug
where else to find them
no profile links on file
what they talk about
where they keep going back
- NDC Oslo4 editions2017–2025
- NDC Security2 editions2023–2025
on a stage with
never shared a talk
who talks about the same things
- Dheeraj Joshi3 talks
- Scott Helme27 talks
- Tom Van Goethem9 talks
- Mike West7 talks
- Kieran Jacobsen6 talks
- Ben Dechrai29 talks
| title | conference | date |
|---|---|---|
| Content Security Policy: From newbie to advanced | NDC Oslo 2025 | 2025-05-19 |
CSP basics plus a live walkthrough that builds a working policy using Chrome DevTools header override, iteratively fixing ~108 then ~146 violations down to two… | ||
| Content Security Policy: From newbie to advanced | NDC Security 2025 | 2025-01-20 |
Explains how to build a working CSP by overriding header in Chromium to iteratively break and fix the NDC Security tickets page, adding specific host entries… | ||
| What happens if I change this URI… oooooh | NDC Security 2023 | 2023-01-16 |
Broken Access Control is now OWASP Top 10 #1 and simple IDORs let attackers enumerate sequential IDs to view or change others’ data; real breaches include a… | ||
| What happens if I change this URI… oooooh | NDC Oslo 2022 | 2022-09-26 |
Broken Access Control becomes OWASP Top 10 #1 and the talk shows why simple plus one test checks find common IDORs: changing a URI exposes orders, profiles or… | ||
| Overcoming a million reasons not to be HTTPS only | NDC Oslo 2018 | 2018-06-11 |
confirm it faces hundreds of customer domains, ~60,000 active documents and roughly a million HTTP references when moving to HTTPS only. Built scanners using… | ||
| Don't worry, your credit card details are safe. BTW your kid is missing! | NDC Oslo 2017 | 2017-06-14 |
Finds multiple real flaws in cloudkids.no using a web proxy and simple tools: Fiddler, Tamper Data/Tamper Chrome and browser devtools. Discovers outdated… | ||
| nothing matches | ||