2,487 reputation
1020
bio website
location Paris, France
age
visits member for 3 years, 9 months
seen 15 hours ago

Security consultant, specializing in application security.


Dec
14
comment Is biometric passport safer than old-fashioned passport
The black market for fingerprint database, if it exists, is really well hidden. It is very unclear what profit and purpose there would be for such a market. Many people don't see it that way yet, but fingerprints are essentially public information and as such, mostly worthless.
Dec
14
answered Is biometric passport safer than old-fashioned passport
Dec
14
reviewed Edit How to call webservice securely in Android
Dec
14
revised How to call webservice securely in Android
Grammatical and language corrections
Dec
9
reviewed Edit I am worried because my college asks students to confirm their credit card number, location, SSN and full name on signup. What do I do?
Dec
9
revised I am worried because my college asks students to confirm their credit card number, location, SSN and full name on signup. What do I do?
Made headline into a question.
Dec
6
reviewed Approve Is this PHP TOTP (time based one time password) idea sound?
Nov
25
comment With HTTPS, what information would a MitM attacker be able to glean?
URLs are encrypted. The reminder of your attacks are classical traffic analysis.
Nov
25
comment Basic question about why it's useful to have VPN encrypt traffic
Anyone with access to the cable, or in the vincinity of the transmission path in case of microwave towers, can also read the packets...
Nov
25
comment Basic question about why it's useful to have VPN encrypt traffic
Too tongue in cheek for what is a ridiculously bad question. Someone is trusting the network in the post Snowden era. It might actually be a troll.
Nov
25
answered Basic question about why it's useful to have VPN encrypt traffic
Nov
22
reviewed Approve How effective are password checking websites?
Oct
9
comment Location Obfusication and Email/remote login
theregister.co.uk/2013/01/16/developer_oursources_job_china
Oct
9
comment Why is “something you know” the weakest factor of authentication?
The tests you speak off are easily bypassed by placing the fake fingerprint on a real finger. Which conveniently for the attacker is a lot easier to do than making a fake finger.
Oct
9
comment Why is “something you know” the weakest factor of authentication?
Biometrics are identification, not authentication. That the conjunction of good marketing and "innocence" of some decision makers led to biometrics being used to authenticate people is really a failure of our industry.
Oct
9
reviewed Approve Securing an OAuth / OpenID Connect identity in a cookie for easy login
Oct
9
revised Why is “something you know” the weakest factor of authentication?
Added a bit about authentication tokens
Oct
9
comment Why is “something you know” the weakest factor of authentication?
In the case of fingerprints they are trivial to reproduce, as in, kid workshop trivial. The gummy bear paper (cryptome.org/gummy.htm) is now 12 years old and should be common knowledge by now. Most other biometric technologies can be fooled too.
Oct
9
answered Why is “something you know” the weakest factor of authentication?
Oct
6
reviewed Approve Unexpected emails have been sent - do I need to wipe my Android?