Nusyne

Joined 11 years ago

Karma

197

Submissions

Member since

Mar 16

View on Hacker News

Recent submissions

Getting the maximum of your C compiler, for security airbus-seclab.github.io

95 Nusyne 5 years ago 9 comments

QEMU Internals airbus-seclab.github.io

323 Nusyne 5 years ago 33 comments

Comment · 5 years ago

There are examples in the author's presentation at SSTIC '19 -- in french only https://www.sstic.org/2019/presentation/GUSTAVE_FuzzItLikeIt...

Comment · 7 years ago

List of publications: https://who.paris.inria.fr/Leo.Perrin/#kuz-final Related article: https://tosc.iacr.org/index.php/ToSC/article/view/7405/6577 & presentation https://www.youtube.com/watch?v=7knu0mIzlnU&t=11325s by one of the researchers mentioned in the article

On the fly virtualization with Cappsule blog.quarkslab.com

1 Nusyne 10 years ago 0 comments

Cappsule: hypervisor to isolate desktop app inside VMs cappsule.github.io

4 Nusyne 10 years ago 0 comments

Reverse engineering an encrypted external HDD [pdf] hardwear.io

3 Nusyne 11 years ago 0 comments

Comment · 11 years ago

Typed the following :

  hello
  -----
  hello

a scroll bar appeared, could not see first line anymore without scrolling up.

Unfixable vulnerability in yubikey neo openpgp applet forum.yubico.com

4 Nusyne 11 years ago 1 comments

Comment · 11 years ago

TextSecure is either Text (SMS, which are not encrypted), OR secure (data). Not both simultaneously.

When Censorship Backfires: How Blue Coat Silenced a Security Researcher forbes.com

1 Nusyne 11 years ago 0 comments

Comment · 11 years ago

Relevant fixes have been commited to OpenBSD

https://marc.info/?l=openbsd-cvs&m=142677386615089&w=2

https://marc.info/?l=openbsd-cvs&m=142677382215078&w=2

https://marc.info/?l=openbsd-cvs&m=142677372515025&w=2

https://marc.info/?l=openbsd-cvs&m=142677368815015&w=2

Comment · 11 years ago

Duplicity allows using gpg in a rather painless way:

  PASSPHRASE="myBackupGpgKeyPassphrase" duplicity ...

I use one gpg key per machine for backups, so having the passphrase in cleartext on that machine is not much of a problem.

Comment · 11 years ago

Attic seems good. Its encryption makes me uneasy (https://github.com/jborg/attic/blob/master/attic/key.py), and I don't feel qualified to review it:

  * use of pkbdf2(passphrase)[0:32] as encryption key?
  * is AES correctly used? there are many pitfalls

I would be much more comfortable with it using gpg for encryption.

Nusyne

Recent submissions

Getting the maximum of your C compiler, for security a airbus-seclab.github.io

QEMU Internals a airbus-seclab.github.io

On the fly virtualization with Cappsule b blog.quarkslab.com

Cappsule: hypervisor to isolate desktop app inside VMs c cappsule.github.io

Reverse engineering an encrypted external HDD [pdf] h hardwear.io

Unfixable vulnerability in yubikey neo openpgp applet f forum.yubico.com

When Censorship Backfires: How Blue Coat Silenced a Security Researcher f forbes.com

Getting the maximum of your C compiler, for security airbus-seclab.github.io

QEMU Internals airbus-seclab.github.io

On the fly virtualization with Cappsule blog.quarkslab.com

Cappsule: hypervisor to isolate desktop app inside VMs cappsule.github.io

Reverse engineering an encrypted external HDD [pdf] hardwear.io

Unfixable vulnerability in yubikey neo openpgp applet forum.yubico.com

When Censorship Backfires: How Blue Coat Silenced a Security Researcher forbes.com