Break&Build Security

Wednesday, August 17, 2022

I moved my blog to medium.com

›
This platform became very old, and is quite buggy, so I moved to https://medium.com/@skantos
Thursday, October 7, 2021

I encrypted with AES-GCM and you won't believe what happened next...

›
Now that you fall for the clickbait, let me give you a quick summary of what this post is about. We will talk about AES-GCM documented and l...
Wednesday, July 14, 2021

Understanding Google Password Checkup

›
Around 2 years ago Google launched Password Checkup (related Google post ), their own solution that complements Troy Hunt’s Have I been Pwn...
Monday, January 7, 2019

Equifax breach exercise

›
When the Equifax breach was made announced, I searched for a few days on recommendations on what they should have done. I couldn’t find a lo...
Tuesday, May 30, 2017

Password (Secrets) storage tips

›
This post is not about if Bcrypt is better than Scrypt or Argon2, or which one to choose. You can see a cheatsheet here: https://www.owa...
Wednesday, May 24, 2017

Appsec California 2017: Serverless! The Holy Grail of Security Operations (!)

›
Hi, wanted to share the presentation I gave with David Cuadrado. Abstract: Let's face it, security operations is time consuming, mo...
Sunday, April 26, 2015

OWASP Latam Tour: Steering a Bullet Train

›
I just wanted to share the presentation I gave last Friday at OWASP Latam Tour Buenos Aires . Many thanks to the organizers which let me spe...
1 comment:
›
Home
View web version

About Me

Santiago Kantorowicz
I'm Santiago Kantorowicz a security professional that started as an ethical hacker consultant, then moved to lead AppSec efforts in a big e-commerce website, and now I'm the Security Officer for a leading 2FA Security product. Though my native language is spanish, I'll be writing in english to have more reach and practice my english. https://www.linkedin.com/in/santikanto
View my complete profile
Powered by Blogger.