375 reputation
114
bio website boos.core-dumped.info
location Italy
age
visits member for 3 years, 10 months
seen 6 hours ago

Computer Science is no more about computers than astronomy is about telescopes", Edsger W. Dijkstra

Roberto "boos" Martelloni, 30y old, Milano, Italy.
In love with computer science, free climbing and with life .

Actually i am working as security, system, software engineer specialist with unix, linux technologies and FOSS solutions.

You can find more info about me (curriculum vitae) on Careers on StackOverflow !
On my website and on my linkedin profile

Do you need more info ? don't esitate to contact me :>


Jun
18
suggested suggested edit on security metrics on softwares developed
Jun
17
comment security metrics on softwares developed
Say that perfect security doesn't exist, , find a way to measure/have an idea on how secure/insecure all software are it's by the way useful to move from FUD (Fear, uncertainty and doubt) to a more numeric way to achieve more (not perfect but more than before) security driven by by number. Suppose you have 40 software with many weakness reported in it, from which software do you start to fix ? which weakness ? On the next release, where do you focalize your effort to prevent/ fix/ enforce the occurrence of less weakness/vulnerabilities?
Jun
17
awarded  Promoter
Jun
17
revised security metrics on softwares developed
added 52 characters in body
Jun
17
revised security metrics on softwares developed
added 174 characters in body
Jun
17
comment security metrics on softwares developed
@Manipulator, in regards to what security metrics highlight it's just a point of view. Does BSIMM suggest some security metrics specific on secure software developments ?
Jun
11
asked security metrics on softwares developed
May
27
comment libraries alternative to gcc stack-protector / fortity source feature on linux
No, compiler add pre/post function check on the code for canary etc, but the functional code for the canary check or fail are in the libc. They are respectively __stack_chk_guard/__stack_chk_fail .
May
27
comment libraries alternative to gcc stack-protector / fortity source feature on linux
There isn't nothing wrong with the built-in functionality, my constraint is that I can't link the glibc.
May
26
asked libraries alternative to gcc stack-protector / fortity source feature on linux
Feb
25
comment What is the most hardened set of options for GCC compiling C/C++?
-ftrapv options doesn't work, there is a BUG in GCC never fixed.
Jan
22
awarded  Popular Question
Jun
8
awarded  Caucus
Jun
6
awarded  Nice Question
Feb
28
comment What lawful interception standards are used outside Europe?
What comment do you mean ?
Feb
27
comment What lawful interception standards are used outside Europe?
In Italy, our provider implement Lawful Interception following the ETSI specification, so every provider have a common way to do LI. For my employer I'm get involved in the design of a software solution, with a functional requirement of compatibility with ETSI standard. So after reading some of that specification the curiosity about non-EU get in me. :)
Feb
24
revised What are the most sophisticated techniques used by intruders you have found in the wild?
added 154 characters in body
Feb
24
comment What are the most sophisticated techniques used by intruders you have found in the wild?
For every malware founded we made reverse engineering of it, so for the most we know what behaviour every malware have, but we haven't meet any advanced techniques in all of it!
Feb
24
comment What are the most sophisticated techniques used by intruders you have found in the wild?
I will made correction asap. Now the question is no more what I was looking for.
Feb
23
asked What are the most sophisticated techniques used by intruders you have found in the wild?