Notes on information security.

I am blogging about Information Security since 2003.

2026

02 Sep An AI-assisted cyber attack

2025

29 Jul Infiltration of global telecom networks
16 Feb QEMU is so underrated

2023

2022

16 Dec HOWTO build a robust CLI application using Cookiecutter, click and Nix

2021

12 Nov What if we used Jupyter as a SOAR?
14 Jul Detecting Golden Ticket attacks
01 Apr Unit-testing the Splunk Processing Language

2020

17 Nov Decoding C2 Traffic in Python, or HOWTO eat 🍿 during an IR engagement?
13 Oct Githubify the SOC
13 Jul Is ProcessID recycling ♻️ on Windows overrated?
22 Jan hugo't to know how this blog is set up!
06 Jan Engineering Yara rules

2019

29 Dec What has inspired me in 2019?

2012

24 Jan Linux security in 2011, or my LKML's yearly digest

2011

02 Nov ld-linux.so ELF hooker
25 Sep Introducing a bit of Web paranoia into my habits...
27 Aug net2pcap revival
06 Jul HOWTO authenticate SSH servers through certificates
11 Apr no-release of seccomp-nurse
03 Jan Linux Security, one year later...

2010

28 Dec La sécurité sous Linux, un an plus tard...
25 Aug What is really the attack surface of the kernel running a SECCOMP process?
15 May Massive reverse address DNS resolver
08 Apr Document review of Qubes OS
25 Mar CVE-2010-0740: Record of death vulnerability in OpenSSL
13 Mar GSM 7-bit encoding
04 Mar SECCOMP as a Sandboxing solution?
23 Feb No more ASLR bypass on Linux 2.6.30
20 Feb How system calls work on recent Linux x86 glibc
20 Feb New blog, new rules