Blog:tech
This is a simple tech blog. I am mostly interested in application security, web, technologies... but every time I can, I try to play with some other field I like such as data-mining, graph theory, compilers, languages, etc..Contact:
Last entries
- Yes, we need a standard to evaluate SAST, but it ain't easy...
- Data driven factory: I give you data, you give me an object...
- NIST Static Analysis Tool Exposition special publication released
- HTML 5 current browsers implementation support
- SHA-3 reference implementations buffer overflows
- When CAPTCHA fails...
- CIA spamming security groups: Be a part of a mission that’s larger than all of us.
- SSL Fails! SSLFail.com
- Every-day's CSRF: Sorry, I turned off your christmas tree lights
- IE7, no Same Origin Policy when the script/file is on your file system
- Internet User Privacy Values Survey
- Last week at NIST
- Scalp 0.4: apache log based attack analyzer, updated
- PyQt and WebKit integration: unexpected limitation [fixed]
- How fair should Google Search be?
- And so you wanted to protect your email address on your website...
- Why the "line of code" is indeed a good metric
- Trie based fast and massive replacement (Algorithm)
- A morning at work: Content-Disposition blocked!
- Scalp: apache log based attack analyzer
- My talk at SAW: Automated Evaluation of source code analyzer output
- ph34r the script kiddies: Whitehouse.org
- Yet another study on code quality: A Tale of Four Kernels
- Static Analysis Tool Exposition is over
- Oh please stop it with these ridiculous CAPTCHAs!
- Accelerate the convergence to the bug: Running the test in 16-bit
- Scaling MySQL db
- MySQL table/field names
- Untrusted websites passwords
- NIST SATE step 3 completed: test cases information release
- Code review: facilitate the SCA output analysis
- OWASP France Chapter & OWASP Top Ten 2007 French
- Code review tools: the missing link (so far)
- SATE ready to go + weaknesses walker + Shmoo + 100
- NIST Static Analysis Tool Exposition: No, this is not a competition!
- Talk: Problems and solutions for testing web application security scanners
- Definition parsing: first step done
- Search engine keywords extraction
- How come I didn't know this resource!!
- Protection against spam bot | fuckthespam.com
Contact:
Links
Web Security
- Tyler Reguly
- ts/sci security
- Larholm blog
- Ronald van den Heetkamp
- Stefano Di Paola
- Christian Matthies
- Anurag's Interviews
- Watchfire's blog
- CGIsecurity
- ha.ckers.org
- Securiteam Blog
- gnucitizen
- Michal Zalewski
- Jeremiah Grossman
- Chris Shiflett
- Stefan Esser
- Disenchant
- Kuza55's Blog
- Kyran's Blog
General Sec.
- Mike Ware's good code
- Ian Bicking: A blog
- TechList.org
- Jason Evans's Grammar/Parsing stuff
- Michael Howard
- Fortify's blog
- Cigital's Justice League
- Plynt Penetration Testing Blog
Last comments