397 reputation
116
bio website boos.core-dumped.info
location Italy
age
visits member for 3 years, 11 months
seen 4 hours ago

Computer Science is no more about computers than astronomy is about telescopes", Edsger W. Dijkstra

Roberto "boos" Martelloni, 30y old, Milano, Italy.
In love with computer science, free climbing and with life .

Actually i am working as security, system, software engineer specialist with unix, linux technologies and FOSS solutions.

You can find more info about me (curriculum vitae) on Careers on StackOverflow !
On my website and on my linkedin profile

Do you need more info ? don't esitate to contact me :>


Nov
5
accepted USB OTG DMA Attack vector, any information about that?
Nov
5
comment USB OTG DMA Attack vector, any information about that?
Ok thank you. Maynor replied to some of my enquiries and he told me nothing basically. I know that USB specification are public but I can't allocate the necessary effort on the spec. I trust your explanation. Thank you.
Nov
5
comment USB OTG DMA Attack vector, any information about that?
Do you know that because you know how USB works under the hood or what ?
Nov
4
comment USB OTG DMA Attack vector, any information about that?
Unfortunately I don't know how USB OTG works. My understanding is that with USB OTG and USB protocol exploitation you can have access to DMA. I contacted Maynor on Twitter but he didn't reply yet. In summary by the way, seems that in the paper are used wrongs and not so clear assumption.
Nov
3
asked USB OTG DMA Attack vector, any information about that?
Oct
28
awarded  Popular Question
Oct
24
awarded  Popular Question
Oct
23
revised What is different about being targeted by a professional attacker?
added 6 characters in body
Oct
20
revised What is different about being targeted by a professional attacker?
added 269 characters in body
Oct
20
answered What is different about being targeted by a professional attacker?
Oct
15
comment Which key usages are required by each key exchange method?
With Openssl tls v1.2 if you don't use keyAgreement in KeyUsage field you are not allowed to establish ECDH but only ECDHE. I think the OP would to know things like that.
Sep
29
comment What are the difference between WPA2-PSK and WPA2-EAP-PSK?
Does EAP-PSK has one password for all clients or one password for client ?
Sep
26
revised What are the difference between WPA2-PSK and WPA2-EAP-PSK?
deleted 149 characters in body
Sep
26
revised What are the difference between WPA2-PSK and WPA2-EAP-PSK?
added 149 characters in body; edited title
Sep
26
asked What are the difference between WPA2-PSK and WPA2-EAP-PSK?
Sep
24
awarded  Autobiographer
Jul
23
comment security metrics on softwares developed
I've studied most of these when I've got the CISSP. With a great likelihood probably I've to move in Gary McGraw's books.
Jul
23
comment security metrics on softwares developed
Ok, understood your point and with said purpose that make sense. it's always difficult to share with pure tech people what some numbers can communicate even if not 'tech founded'. At the moment I'm trying to push up my 'consultancy/managerial' sec skills. Do you have any suggestion about other books that are a MUST read on sec management ?
Jul
22
comment security metrics on softwares developed
I totally disagree with your introduction but at the end I've chosen your answer, as unique answer to the question. To allow you to understand better why metrics are important I suggest to you to read this book: amazon.com/Security-Metrics-Replacing-Uncertainty-Doubt/dp/…
Jul
22
accepted security metrics on softwares developed