Florent Bouckenooghe
28.8K posts

Florent Bouckenooghe
@f1oren
Vice-ministre des internets. Photographie. Blogueur à temps très partiel. Fan de 🚲, accro 🎶 #LaRéunion #vélotaf #FttH #HFC #FttR #Telco #RIPEAtlas #IPv6










🗣️ @AlainMarschall : "BYD, l'usine chinoise de voitures, s'installe en Hongrie. Ils vont être éligibles au bonus écologique. Donc on va acheter des voitures chinoises avec le bonus européen. Elles vont démarrer à 19.000 €. C'est ba*sé ! On va rouler chinois !" #GGRMC

Vraiment le Compte Personnel de Formation c'est devenue une gabegie imbuvable. J'ai acquis des droits @Travail_Gouv mais comme ma formation "n'est pas assez chère", je ne peux pas financer mon recyclage PSE2 autrement qu'avec ma CB. Du coup à qui profitent "mes droits" ? 😤





#Redistribution | Après redistribution publique nationale, le niveau de vie élargi moyen des ménages actifs employés ou ouvriers est peu modifié. 👉 #titre-bloc-10" target="_blank" rel="nofollow noopener">insee.fr/fr/statistique…






Croyant citer la Bible, le secrétaire américain à la Défense lit une tirade de "Pulp Fiction" lors d'une messe au Pentagone l.bfmtv.com/vdpc



We've recently observed some unusual large-scale routes appearing on the internet (see image), involving the following networks: AS393232: Comcast Cable Communications 🇺🇸 AS36429: @chartercomms 🇺🇸 AS41128: @orange 🇫🇷 AS13335: @Cloudflare 🇺🇸 AS17072: @totalplaymx 🇲🇽 AS270118: SOLUCIONES, ANALITICOS Y SERVICIOS TEAM (Stratosphere Technology Latam) 🇲🇽 AS199524: @gcore_official 🇱🇺 The label "path (fixed)" indicates that identical paths were observed by several probes across the internet. This strongly suggests that AS199524 is the central pivot point behind these announcements. While the first four paths have since disappeared, the most recent three remain active. ⬇️

.@vonderleyen "The European #AgeVerification app is technically ready. It respects the highest privacy standards in the world. It's open-source, so anyone can check the code..." I did. It didn't take long to find what looks like a serious #privacy issue. The app goes to great lengths to protect the AV data AFTER collection (is_over_18: true is AES-GCM'd); it does so pretty well. But, the source image used to collect that data is written to disk without encryption and not deleted correctly. For NFC biometric data: It pulls DG2 and writes a lossless PNG to the filesystem. It's only deleted on success. If it fails for any reason (user clicks back, scan fails & retries, app crashes etc), the full biometric image remains on the device in cache. This is protected with CE keys at the Android level, but the app makes no attempt to encrypt/protect them. For selfie pictures: Different scenario. These images are written to external storage in lossless PNG format, but they're never deleted. Not a cache... long-term storage. These are protected with DE keys at the Android level, but again, the app makes no attempt to encrypt/protect them. This is akin to taking a picture of your passport/government ID using the camera app and keeping it just in case. You can encrypt data taken from it until you're blue in the face... leaving the original image on disk is crazy & unnecessary. From a #GDPR standpoint: Biometric data collected is special category data. If there's no lawful basis to retain it after processing, that's potentially a material breach. youtube.com/watch?v=4VRRri…










