16,201 reputation
23881
bio website stackexchange.com/users/…
location Paris, France
age 34
visits member for 3 years, 4 months
seen 39 mins ago

Moderator♦ pro tempore on French Language and Usage and Computer Science. I'm also a unix amateur, and a developer with a computer science background and security leanings by trade.

Interested in embedded systems? Join the Embedded Programming and Design proposal!

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus) (except where I use another picture).


1h
reviewed Close okcupid hackable with Hydra?
1h
comment How to prevent attacks before HSTS is established for the first time?
See security.stackexchange.com/questions/44849/… for more details.
1h
comment How to prevent attacks before HSTS is established for the first time?
I don't know what you're asking, but this earlier thread may cover it. If it doesn't, edit your question to clarify it.
1h
reviewed Close How to prevent attacks before HSTS is established for the first time?
1h
comment How to prevent attacks before HSTS is established for the first time?
possible duplicate of Security of an initial redirection from http://example.com to https://example.com
1h
reviewed Leave Open Why does MD5 hash starts from $1$ and SHA-512 from $6$? Isn't it weakness in itself?
1h
reviewed Edit Nmap SSL service detection: How to check all open ports only for SSL service?
1h
revised Nmap SSL service detection: How to check all open ports only for SSL service?
deemphasize heartbleed as it's just an example
1h
reviewed Close -bash: -sudo: command not found
1h
comment Why does MD5 hash starts from $1$ and SHA-512 from $6$? Isn't it weakness in itself?
“suggesting that there can be more algorithms generating the same hash from different data” No, this does not happen. Not if we're talking about cryptographic hashes (hashes used in hash tables are a completely different matter).
1d
answered Why does a web site operator need to trust an openid provider?
2d
reviewed Reject suggested edit on How to prevent users from downloading information from our search engine?
2d
reviewed Reject suggested edit on Are there “secure” languages?
2d
reviewed Edit suggested edit on What should a website operator do about the Heartbleed OpenSSL exploit?
2d
revised What should a website operator do about the Heartbleed OpenSSL exploit?
Included another offline tool
Apr
14
reviewed Approve suggested edit on nginx recommended ssl_ciphers for security, compatibility - with PFS
Apr
14
reviewed Approve suggested edit on How widely is Perfect Forward Secrecy in HTTPS clients?
Apr
14
reviewed Approve suggested edit on PFS on nginx: only RC4 gets used (TLS_ECDHE_RSA_WITH_RC4_128_SHA)
Apr
14
reviewed Reject suggested edit on jmeter tag wiki
Apr
14
reviewed Approve suggested edit on Is forwarding a port(s) a security risk to all computers on the network or just one?