FICOBA: notes on a reported data exposure
A public-source reading note on FICOBA, access authorization and incident response. Full note in French.
Blog
Articles
Notes on system security, industrial systems, cryptography and software engineering, with links to my detailed guides on GitBook.
System Security
Linux persistence mechanisms
Notes on detecting and removing persistence mechanisms after a Linux compromise.
Industrial Systems
IT/OT security frameworks
An overview of cybersecurity references and how to use them when preparing an IT/OT assessment.
Cryptography
PKCS#11: integrating applications with cryptographic tokens
Provider modules, sessions, key attributes and error handling in PKCS#11 integrations.
Private PKI: a hands-on deployment guide
A learning walkthrough from Step-CA setup to certificate automation and TLS integration.
HSMs: key storage and access
How hardware security modules protect keys, and the access and recovery decisions involved.
PKI: certificate authorities and lifecycle management
Certificate issuance, trust anchors, renewal and recovery in a public key infrastructure.
Elliptic curves over finite fields
Moving from geometric intuition to finite-field arithmetic and group operations in elliptic-curve cryptography.
Digital certificates: identity, keys and trust
Understanding what a certificate binds together, how a trust chain is validated, and what certificates do not guarantee.
Elliptic-curve cryptography: the mathematical foundation
An introduction to elliptic curves and the distinction between mathematical structure and secure protocol implementation.
AES: modes, keys and implementation
An introduction to AES and the mode, key and nonce choices involved in using it.
Software Engineering
Unix/Linux on Windows: Choosing the Right Environment
Through my experience, I have often needed a Linux environment on my Windows computer. In this series, I explore the different ways to run or develop Linux software on Windows.
Notes from the AI Fluency course
Notes on responsible AI use, human review and the difference between automation, augmentation and agency.
Cross-compilation for constrained ARM environments
A practical engineering note on building tools for an ARM environment that lacks a conventional development toolchain.