They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
if you're using Burp, here is a tiny bug, the patch should be in the next release: In the Login Recorder web extension, the algo of Public keys is not casted as an int. Thus, a buggy website sending the only supported value as a string will get an error.
Here is the small patch:
In the ${Burp_Install_Directory}/navigation-recorder/background/recorder-service-worker.js, replace:
if(!t.pubKeyCredParams.some(e=>-7===e.alg))
with
if(!t.pubKeyCredParams.some(e=>-7===parseInt(e.alg)))
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
I’m so excited! H2lab finally re-open their shop! 
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
I scored 63 on the CTF Purity Test! https://ctfpuritytest.com https://ctfpuritytest.com/
Yeah, fair 😅
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
It was fun! Thank you @sstic@infosec.exchange!
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
It may sound silly, but, the fact that someone with a pride flag on a pin came to me just to tell me that he appreciates my Act-Up shirt, made me feel sooooooo much better.
Yeah, signs counts, even small ones. It’s really a small thing I always neglected. But it really counts!
So, to you, thank you ❤️
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
The French cybersecurity world seems to change a bit since my migration, and for the best: more fem and nb-looking persons :neocat_kirby:
I’m happy to see that! Really happy 🥰
#sstic #sstic2025
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
Gosh, please stop to name events “Women at XXXXX” or “XXXXXXX for women” if you includes all the gender minorities.
Seriously, ask me to come, and I’ll feel as an intruder: I’m not a woman, nor a man. Just someone. I’m include in the “gender minorities” set, but not in the “women” set. The “women” Venn diagram is not including me :)
They/them · PP by @ZazieZanie@twitter.com · former @sysdream@twitter.com / @hackinparis@twitter.com / @iotcert@twitter.com / @Atos_Security@twitter.com.
Happy Trans Day of Visibility to my fellows!
(And, yes, I’m also trans!)
