345 reputation
113
bio website boos.core-dumped.info
location Italy
age
visits member for 3 years, 9 months
seen yesterday

Computer Science is no more about computers than astronomy is about telescopes", Edsger W. Dijkstra

Roberto "boos" Martelloni, 30y old, Milano, Italy.
In love with computer science, free climbing and with life .

Actually i am working as security, system, software engineer specialist with unix, linux technologies and FOSS solutions.

You can find more info about me (curriculum vitae) on Careers on StackOverflow !
On my website and on my linkedin profile

Do you need more info ? don't esitate to contact me :>


Jul
23
comment security metrics on softwares developed
I've studied most of these when I've got the CISSP. With a great likelihood probably I've to move in Gary McGraw's books.
Jul
23
comment security metrics on softwares developed
Ok, understood your point and with said purpose that make sense. it's always difficult to share with pure tech people what some numbers can communicate even if not 'tech founded'. At the moment I'm trying to push up my 'consultancy/managerial' sec skills. Do you have any suggestion about other books that are a MUST read on sec management ?
Jul
22
comment security metrics on softwares developed
I totally disagree with your introduction but at the end I've chosen your answer, as unique answer to the question. To allow you to understand better why metrics are important I suggest to you to read this book: amazon.com/Security-Metrics-Replacing-Uncertainty-Doubt/dp/…
Jul
22
accepted security metrics on softwares developed
Jul
21
comment is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
Indeed digging more in I've found that the anti-tampering mechanism for this device monitors the temperature.
Jul
18
comment is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
I can't believe it's not crackable :D
Jul
18
comment is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
what about microwave ? humidity ? magnetic ray from a medical equipment ?
Jul
18
revised is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
added 178 characters in body; edited title
Jul
18
comment is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
What about increasing temperature/humidity of the room or something like that ?
Jul
18
asked is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?
Jul
2
awarded  Curious
Jun
18
revised security metrics on softwares developed
Added specific reference to state-of-the-art standards
Jun
18
suggested suggested edit on security metrics on softwares developed
Jun
17
comment security metrics on softwares developed
Say that perfect security doesn't exist, , find a way to measure/have an idea on how secure/insecure all software are it's by the way useful to move from FUD (Fear, uncertainty and doubt) to a more numeric way to achieve more (not perfect but more than before) security driven by by number. Suppose you have 40 software with many weakness reported in it, from which software do you start to fix ? which weakness ? On the next release, where do you focalize your effort to prevent/ fix/ enforce the occurrence of less weakness/vulnerabilities?
Jun
17
awarded  Promoter
Jun
17
revised security metrics on softwares developed
added 52 characters in body
Jun
17
revised security metrics on softwares developed
added 174 characters in body
Jun
17
comment security metrics on softwares developed
@Manipulator, in regards to what security metrics highlight it's just a point of view. Does BSIMM suggest some security metrics specific on secure software developments ?
Jun
11
asked security metrics on softwares developed
May
27
comment libraries alternative to gcc stack-protector / fortity source feature on linux
No, compiler add pre/post function check on the code for canary etc, but the functional code for the canary check or fail are in the libc. They are respectively __stack_chk_guard/__stack_chk_fail .