2,003 reputation
319
bio website
location Geneva, Switzerland
age 28
visits member for 2 years, 2 months
seen yesterday

I work as an Information Security professional, solving problems like the ones on this website. If you need advisory or help, you can contact me.


Jul
25
comment Access rights management in large companies
Thank you for this helpful answer. Would you have other readings recommendations ? I found NIST interesting but clearly too much theoretical, what I'm looking for is real-world implementations in environments with loooots of apps running, and you have usually lost control over who can access what, why and how.
Jul
24
awarded  Curious
Jul
23
asked Access rights management in large companies
Jul
15
awarded  Quorum
Jun
23
reviewed No Action Needed How to sync with multiple authentication services?
Jun
19
reviewed No Action Needed Wifi deauth attack - Difference between Aireplay and MDK3
Jun
9
comment How do exploits and payloads work together?
An exploit is what allows you to take control over the execution flow. The payload is what you want to do then.
Jun
9
asked What is DVNC and how does it work?
Jun
9
revised How to monitor my home network traffic?
Changed title
Jun
9
reviewed Reviewed How to monitor my home network traffic?
Jun
9
suggested suggested edit on How to monitor my home network traffic?
Jun
9
reviewed No Action Needed Do actual penetration testers actually use tools like metasploit?
Jun
9
reviewed No Action Needed Practicing pentesting locally
May
29
reviewed No Action Needed Establishing a Reputable Pseudonym with PGP Key
May
29
reviewed No Action Needed How to determine what type of encryption has been used?
May
29
reviewed No Action Needed Safely converting untrusted files with Microsoft Word in a web service
May
28
comment Can OSSTMM RAVs be the base for a risk assessment methodology compliant with the new ISO 27001:2013 and ISO 31000?
As long as it's properly documented, planned and executed at appropriate times, and that it meets the other ISO standard criterias, yes.
May
28
revised Can OSSTMM RAVs be the base for a risk assessment methodology compliant with the new ISO 27001:2013 and ISO 31000?
massive change based on OP comment
May
28
comment Can OSSTMM RAVs be the base for a risk assessment methodology compliant with the new ISO 27001:2013 and ISO 31000?
You are right I went too fast on RAV calculation. See my edited answer.
May
28
revised Can OSSTMM RAVs be the base for a risk assessment methodology compliant with the new ISO 27001:2013 and ISO 31000?
massive change based on OP comment