2,200 reputation
521
bio website
location Geneva, Switzerland
age 29
visits member for 2 years, 11 months
seen 8 hours ago

I work as an Information Security professional, solving problems like the ones on this website. If you need advisory or help, you can contact me.


2d
reviewed Approve Is email from my WordPress site a hack or just a normal comment?
Apr
7
revised Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
removed ref to Metasploit as OP edited his post
Apr
7
revised Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
grammar + bit of content
Apr
7
reviewed Reject Recovering encrypted SD card after Android Factory Reset
Apr
7
answered Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
Mar
31
reviewed Approve I just found many facebook entries on my registry?
Feb
20
reviewed Approve What are good proof-of-concept implementations for general security awareness training?
Nov
28
reviewed Approve Steps to find out whether a SSL certificate is trustworthy
Nov
28
reviewed Approve Email Encryption
Nov
26
reviewed Approve Is XSS a server-side or client-side vulnerability?
Nov
26
reviewed Approve Evil PHP code I need help analyzing
Nov
11
comment How web application firewalls protect application from DDoS attacks?
@AnonymousPlatypus: Indeed, the web-app could become the point of failure if the WAF let the trafic go through. Keep in mind that WAF is mainly about content control, not volume control.
Nov
10
comment How web application firewalls protect application from DDoS attacks?
Right, although in this case the protection doesn't come from the WAF itself, but rather from the 750Gbps+ pipe provided by the CDN.
Nov
10
answered How web application firewalls protect application from DDoS attacks?
Oct
28
awarded  Good Answer
Oct
26
reviewed Approve Need Help with decrypting the “client key exchange” captured in wireshark
Sep
30
awarded  Explainer
Sep
2
reviewed Reject Is there a security issue in using the same certificate for all a company's services?
Aug
19
reviewed Approve What's the inverse of sandbox security pattern?
Aug
18
reviewed Approve Recover password or password hash from locked account