Just Another Geek

I am blogging about Information Security since 2003

28 Dec 2010

La sécurité sous Linux, un an plus tard...

*Sorry english folks: this post is in french, ~~but it will be translated soon~~, [translated and updated post is avail...
25 Aug 2010

What is really the attack surface of the kernel running a SECCOMP process?

Were our SECCOMP expectations right?
15 May 2010

Massive reverse address DNS resolver

Dummy code to scan wide netblocks in NodeJS
08 Apr 2010

Document review of Qubes OS

I had a glance to Qubes OS documents, this is my review
25 Mar 2010

CVE-2010-0740: Record of death vulnerability in OpenSSL

It is a write-up of the CVE-2010-0740's vulnerability in OpenSSL
13 Mar 2010

GSM 7 bits encoding

I implemented some GSM protocol parts in scapy so I had to implement the infamous "7 bits alphabet".
04 Mar 2010

SECCOMP as a Sandboxing solution ?

SECCOMP is a Linux feature introduced in 2.6.23 to run untrusted executables.
23 Feb 2010

No more ASLR bypass on Linux 2.6.30

While trying to exploit a local setuid application, I had the unhappiness (as an attacker) to see that the security of ...
20 Feb 2010

How system calls work on recent Linux x86 glibc

This post explains how system calls are implemented on recent Linux system.
20 Feb 2010

New blog, new rules

Sometimes, I receive emails asking me to translate my papers or blog posts in English; each time, I procrastinate and n...