1,486 reputation
715
bio website
location Paris, France
age
visits member for 3 years
seen 10 hours ago

Security consultant, specializing in application security.


Apr
14
awarded  Enlightened
Apr
14
awarded  Nice Answer
Mar
29
awarded  Yearling
Jan
17
comment Is AES feasible for secure hashing files?
You might want to read the paper " On the Impossibility of Highly-Efficient Blockcipher-Based Hash Function" (iacr.org/archive/eurocrypt2005/34940527/34940527.ps‎). Also that crypto stack exchange question crypto.stackexchange.com/questions/10284/…
Oct
23
comment Advantages and disadvantages of Stream versus Block Ciphers
None is more secure by nature, it's really how you use them.
Oct
1
awarded  Nice Answer
Sep
28
comment Password-less network in skyscraper office
A captive portal also silently breaks services accessed by an HTTP API, e.g. a twitter client...
Sep
27
comment Password-less network in skyscraper office
Captive portal are a pain in the ass for all that traffic that isn't browsing... E.g. what apps on your smartphone do, or your VPN client. To me a guest password is a lot more convenient.
Sep
18
answered Is it safe to expose an SHA1 hash of an encryption key?
Sep
12
answered Is there a pre-existing taxonomy of attackers?
Sep
12
comment iPhone 5S security: Given someone's fingerprint can I use a 3D printer to create a fake finger with a real fingerprint on it?
Are you aware of any attempt to machine new ridges on a real, live finger using a CNC mill? The precision required seems well within their capabilities and little depth is required, meaning it should not really hurt that much.
Jul
9
comment Should RSA public exponent be only in {3, 5, 17, 257 or 65537} due to security considerations?
In a stunning development, this post is now used to justify using 1 as a public exponent github.com/saltstack/salt/commit/…
Mar
29
awarded  Yearling
Jan
24
awarded  Notable Question
Jan
14
comment Which is the most vulnerable to MITM attacks, SSL or SSH?
MITM has one more venue in the TLS case, as you can trick a legitimate certificate authority to issue a valid certificate. It happened before and is likely to happen again.
Jan
14
answered Which is the most vulnerable to MITM attacks, SSL or SSH?
Dec
20
awarded  Nice Answer
Nov
25
comment How secure is aSSL (javascript)? Does it effectively mimic SSL?
Same origin policy should prevent that.For very good reasons.
Nov
23
answered How secure is aSSL (javascript)? Does it effectively mimic SSL?
Oct
15
comment Plausible deniability for phones
Truecryt not Trycrypt I assume?