meta user
network profile
| bio | website | careers.stackoverflow.com/… |
|---|---|---|
| location | Metz, France | |
| age | 28 | |
| visits | member for | 2 years, 3 months |
| seen | May 13 at 9:25 | |
| stats | profile views | 239 |
Ph.D in Information Technology
My main field of qualification and research is the Information Security.
My current topic of research includes photography watermarking, authentication schemes, geolocation security assessment and ISO27001 compliance.
Where to find me ? Follow @mvyonline on twitter and Google+, or see my Careers 2.0 profile or my LinkedIn page.
|
Jun 5 |
awarded | Nice Answer |
|
May 20 |
awarded | Nice Answer |
|
Apr 24 |
comment |
How WEP/WPA authentication works in a WiFi environment? WEP and WAP has nothing to do with the 802.1x protocol AFAIK. It's only a way to crypt the wireless transmission. By the way, they usually require a key prior to connection, that will be incompatible (or will come as an addition) to the 802.1x authentication. In fact, only the authentication server can authenticate you, therefore you can't use any secret to communicate with the authenticator. Not sure if anyone has set up this kind of architecture using WAP/WEP keys, but I think this will just be a burden. |
|
Apr 24 |
answered | How WEP/WPA authentication works in a WiFi environment? |
|
Apr 24 |
answered | Encryption of headers in IPsec tunnel mode |
|
Mar 18 |
awarded | Nice Answer |
|
Mar 7 |
comment |
What are Security Practices for NoSql databases I suggest you edit the question with the relevant details. |
|
Mar 7 |
answered | certificate usage for signing and encryption |
|
Mar 7 |
comment |
What are Security Practices for NoSql databases Welcome to Security.se, you question as formulated here is too broad. Could you refine your question with more details like: what did you already did, what is the architecture of your service (is it direct access to DB via internet, is it a server for an online application, ...), what data do you want to protect (user data, credit card number, ...). As is, this question is very likely to be closed. |
|
Mar 2 |
answered | Why we use GPG signatures for file verification instead of hash values? |
|
Mar 1 |
comment |
Can someone steal money from my bank account if they know my IBAN and personal details? In France, I am required to send a letter of authorisation for each automatic withdrawing order (phone company, energy company etc). Hopefully the lack of proper authorisation should trigger refusal? |
|
Feb 28 |
awarded | Yearling |
|
Feb 21 |
awarded | Custodian |
|
Feb 21 |
reviewed | No Action Needed Site backdoor & eval() |
|
Feb 21 |
awarded | Custodian |
|
Feb 19 |
comment |
Suspect Exchange Server appears to be hacked. How to determine if it was a false positive? What did trigger the event? the exchange server himself or an IDS/IPS on the network? |
|
Feb 18 |
answered | Can my company access my computer via the VPN? |
|
Feb 18 |
comment |
Strategies to store/remember very long password? "Nobody can brute force your head" is a wrong assumption. There are methods to get pieces of information from people and that's called "Social Engineering". |
|
Feb 18 |
comment |
Strategies to store/remember very long password? You already suggested the Bible verse. So it does make perfect sense. It shows that size matters not, it's entropy that matter. If you have an algorithm/method to set your password over true randomness, there is a possibility that someone figures it out (you even revealed it here, for what we know). Thus, you can't rely on the obscurity of your method. Making hypothesis on the knowledge of the attacker is a mistake. |
|
Dec 21 |
answered | How do spammers verify the validity of a huge amount of email addresses? |
