2,468 reputation
1020
bio website
location Paris, France
age
visits member for 3 years, 7 months
seen Oct 19 at 5:02

Security consultant, specializing in application security.


Oct
9
comment Location Obfusication and Email/remote login
theregister.co.uk/2013/01/16/developer_oursources_job_china
Oct
9
comment Why is “something you know” the weakest factor of authentication?
The tests you speak off are easily bypassed by placing the fake fingerprint on a real finger. Which conveniently for the attacker is a lot easier to do than making a fake finger.
Oct
9
comment Why is “something you know” the weakest factor of authentication?
Biometrics are identification, not authentication. That the conjunction of good marketing and "innocence" of some decision makers led to biometrics being used to authenticate people is really a failure of our industry.
Oct
9
reviewed Approve suggested edit on Securing an OAuth / OpenID Connect identity in a cookie for easy login
Oct
9
revised Why is “something you know” the weakest factor of authentication?
Added a bit about authentication tokens
Oct
9
comment Why is “something you know” the weakest factor of authentication?
In the case of fingerprints they are trivial to reproduce, as in, kid workshop trivial. The gummy bear paper (cryptome.org/gummy.htm) is now 12 years old and should be common knowledge by now. Most other biometric technologies can be fooled too.
Oct
9
answered Why is “something you know” the weakest factor of authentication?
Oct
6
reviewed Approve suggested edit on Unexpected emails have been sent - do I need to wipe my Android?
Oct
2
reviewed Edit suggested edit on Dos Attack and other malwares!
Oct
2
revised Dos Attack and other malwares!
small formatting :)
Sep
30
awarded  Explainer
Sep
24
awarded  Autobiographer
Sep
16
comment Downsides to using HTTPS
HTTPS is HTTP on top of TLS, not the reverse. Uulike say SMTP and its STARTTLS command, the TLS part is handled before any HTTP operation takes part in HTTPS.
Sep
2
awarded  Guru
Aug
22
comment Location Obfusication and Email/remote login
No need for any special software, only need to have a VPN to their home network from that that white sand beach. The dude that offloaded his work to a Chinese company should have done that and would never have been caught.
Aug
19
comment What would cause a server to only send over 1 SSL certificate to a client?
Well, a server misconfiguration. Hard to know more without knowing the server type, but are the certificate in the right order in the file?
Aug
18
reviewed Approve suggested edit on Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?
Aug
14
comment Can we trust antivirus software?
Didn't it effectively destroy RSA business? It may be hard to extract from EMC annual report, but I'd be pretty surprised if it didn't hurt quite a bit.
Aug
12
reviewed Approve suggested edit on Configure Firefox against malicious 302 redirect from a embedded image resource?
Aug
12
reviewed Approve suggested edit on Is it safe to store passwords on Google drive?