21,534 reputation
357107
bio website stackexchange.com/users/…
location
age
visits member for 4 years, 7 months
seen 2 hours ago

Moderator♦ pro tempore on French Language, Computer Science and Software Recommendations. I'm also a unix amateur, and a developer on embedded systems with a computer science background and security leanings by trade.

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus).


5h
comment Looking for credit card data and other PII in files
I'm voting to close this question because it's only attracted worthless one-liner “use this product its great” (or “use this product its crap”!) answers. The question could probably be salvaged by an edit, but as it's already asking about methodology and not about tools, I'm at a loss as to how to edit it to get useful answers.
5h
reviewed Reviewed Looking for credit card data and other PII in files
5h
comment Looking for credit card data and other PII in files
And why should we use your product?
1d
reviewed Looks OK Would Axolotl Ratchet protocol be suitable for encrypting email communication?
1d
reviewed Close How to ensure website from hackers and more?
2d
awarded  Guru
Jun
25
answered output from CryptGenRandom
Jun
25
reviewed Close open redirect via POST?
Jun
23
answered Can a 0800 and 00800 be from different companies in UK
Jun
13
comment webshell on webserver, but what does it contain/do?
This obviously calculates a hash of something. If your question is what this calculates the MD5 of, you need to show us where _POST comes from and what is defining _f__f. Your question must be self-contained, we aren't going to trawl external websites that might go away by the time someone next reads the question.
Jun
13
reviewed Close webshell on webserver, but what does it contain/do?
Jun
13
reviewed Close AppArmor: Are multiple profiles per application (Firefox, Thunderbird) possible? Syntax?
Jun
13
comment AppArmor: Are multiple profiles per application (Firefox, Thunderbird) possible? Syntax?
I'm voting to close this question as off-topic because it is about configuring a tool, not about designing a security policy. It would be best asked on Unix & Linux.
Jun
12
reviewed Leave Closed How do I report a security vulnerability about a trusted certificate authority?
Jun
10
reviewed Close Are there security implications to not installing the Leap Second patch on Red Hat systems?
Jun
9
comment Should I trust zxcvbn with my password?
Note that password strength checkers are pretty bogus, since they only have a single string to work with, whereas what matters is how the password was generated. If you actually want to estimate the entropy of a password (which doesn't vary over time, by the way), review the generation method.
Jun
9
revised Should I trust zxcvbn with my password?
edited tags
Jun
7
reviewed Close open Truecrypt container with password xor keyfile
Jun
7
reviewed Leave Open Hijacked Aol Email Account - Lack of security?
Jun
7
reviewed Close How get X509 certificate's full cert chain programatically?