orahlu's comments

orahlu · on Oct 14, 2015

This was presented at SSTIC 2015.

paper (in french): https://www.sstic.org/media/SSTIC2015/SSTIC-actes/injection_... video (in french): http://static.sstic.org/videos2015/SSTIC_2015-06-03_P09_AGRE...

orahlu · on Aug 18, 2015

> Ad delivery networks, and google is one of the biggest, have one core business: delivering ads

It's made by an alphabet subsidiary, not google. Google are the bad ad-selling guys, they're the good guys. 100% true!

orahlu · on Aug 14, 2015

One drawback is that deleted files take disk space permanently.

orahlu · on June 16, 2015

Uses well-audited GPG, high level crypto functions which makes it difficult for the developer to get the crypto wrong.

orahlu · on June 16, 2015

These has been a security audit, ordered by the french ANSSI (French government IT Security agency). This audit resulted in a "CSPN" certificate, which basically means that 35 days were spent by a competent auditor (Thales), and no important vulnerabilities were found in KeePass 2.0 Portable.

Report: http://www.ssi.gouv.fr/uploads/IMG/cspn/anssi-cspn_2010-07fr...