This was presented at SSTIC 2015. paper (in french): https://www.sstic.org/media/SSTIC2015/SSTIC-actes/injection_... video (in french): http://static.sstic.org/videos2015/SSTIC_2015-06-03_P09_AGRE...
> Ad delivery networks, and google is one of the biggest, have one core business: delivering ads It's made by an alphabet subsidiary, not google. Google are the bad ad-selling guys, they're the good guys. 100% true!
One drawback is that deleted files take disk space permanently.
Uses well-audited GPG, high level crypto functions which makes it difficult for the developer to get the crypto wrong.
These has been a security audit, ordered by the french ANSSI (French government IT Security agency). This audit resulted in a "CSPN" certificate, which basically means that 35 days were spent by a competent auditor…
This was presented at SSTIC 2015. paper (in french): https://www.sstic.org/media/SSTIC2015/SSTIC-actes/injection_... video (in french): http://static.sstic.org/videos2015/SSTIC_2015-06-03_P09_AGRE...
> Ad delivery networks, and google is one of the biggest, have one core business: delivering ads It's made by an alphabet subsidiary, not google. Google are the bad ad-selling guys, they're the good guys. 100% true!
One drawback is that deleted files take disk space permanently.
Uses well-audited GPG, high level crypto functions which makes it difficult for the developer to get the crypto wrong.
These has been a security audit, ordered by the french ANSSI (French government IT Security agency). This audit resulted in a "CSPN" certificate, which basically means that 35 days were spent by a competent auditor…