221 reputation
16
bio website
location France
age
visits member for 2 years, 4 months
seen Apr 11 at 8:26

Feb
8
comment Bad practice to have a “god” password?
Looks to me that this answer is the closest one to OP problem. An administrative account is not the solution as it has a different visibility/behaviour than the one of the user being troubleshooted.
Nov
27
awarded  Yearling
Oct
15
comment Do we need to logout of webapps?
As a side note -- it is interesting to check whether your critical application does force a re-authentication, ideally through a different mean (= if you log in with login/password, re-authenticate/confirm with an SMS) before running a critical operation (such as a wire transfer for a bank). Typically in a bank environment it is a very bad thing is someone manages to look at your account. It is a catastrophic one if someone manages to issue a transaction (transfer)
Sep
24
accepted how secure is an iPhone 4S+ with iOS 6+ in 2013?
Sep
23
revised how secure is an iPhone 4S+ with iOS 6+ in 2013?
added reference
Sep
23
asked how secure is an iPhone 4S+ with iOS 6+ in 2013?
Jun
11
accepted POC of a Java exploit using leftover JREs
Jun
11
comment POC of a Java exploit using leftover JREs
Thanks - this is an interesting approach, I will try that.
May
23
comment POC of a Java exploit using leftover JREs
@Anorov: on the browsers I tested (Chrome, IE) there is just a warning about using the applet in the first place. This is not a deterrent for users determined to get hacked :) As for the payload -- I wanted to show a true exploit (working on systems with leftovers, not working on others)
May
22
comment POC of a Java exploit using leftover JREs
@Ramhound: the question would be: would someone have a ready solution, or anything (a comment, a pointer) which could help me to build mine? (I was wrong assuming this is obvious, per the downvote. It is true that I could have just posted this for the sake of expressing my dreams :))
May
22
revised POC of a Java exploit using leftover JREs
typo
May
22
revised POC of a Java exploit using leftover JREs
added nessus reference
May
22
asked POC of a Java exploit using leftover JREs
Feb
5
answered RSS Feeds: restrict access
Dec
4
awarded  Scholar
Dec
4
accepted passphrases - lowercase and dictionary words
Aug
8
comment Does password protecting an archived file actually encrypt it?
The Appendix of the document mentions that AES 128 is used by default for Office for 2007+ . I will be meeting some MS security teams by autumn so I will ask the question about legacy algorithms and update my answer.
Aug
8
answered Does password protecting an archived file actually encrypt it?
Apr
12
comment nessus scan against metasploit exploits
Thanks - I will be looking into that as well and update this page if any luck (I have some years of dev lagging :))
Apr
11
comment nessus scan against metasploit exploits
As for the ability to run scans from metasplot, I mentioned I am aware of it but it does not help to reduce the number of tests (it basically allows to run & import scan results to be reused by Metsploit)