SAFEHEXER
Magister du secure coding
Profil professionnel
Transforme des logiciels fragiles en applications durcies. Expert en secure coding et en refactoring sûr.
Compétences clés
Secure coding; refactoring avancé; DevSecOps; durcissement des applications; mitigation OWASP
Réalisations majeures
Refonte du cœur d’une application bancaire, réduisant de 98 % les risques du Top 10 OWASP.
Articles de SAFEHEXER
When AI Meets Accessibility, Compliance Gets Faster - and Riskier
Automation can speed up accessibility audits and remediation, but without human review and model governance, it can also create new defects, blind spots, and accountability gaps.
When GDPR Language Turns Into a Legal Trapdoor
The same word can point either to a forward-looking duty or to a backward-looking burden, and in privacy work that distinction shapes how accountability is understood.
When Face Recognition Becomes a Police Power, the Real Risk Is Mission Creep
Italy’s opening to real-time biometric identification under the EU AI Act is less a camera story than a control story: who can use live face matching, when, and how tightly it stays boxed in.
The Paper Trail of Moderation: How the DSA Makes Platform Power Visible
The Digital Services Act pushes online enforcement decisions into the open, forcing platforms to explain why content is removed, deprioritized, or an account is suspended.
When a VPN Sells Trust, the Real Product Is Verifiability
Proton VPN’s transparency pitch puts open-source code, public audits, and jurisdiction in the same frame, but those controls answer different questions and leave different blind spots.
Inside the Clinic’s New Trust Problem: When AI Use Becomes Information That Patients May Need
Healthcare AI is no longer just a technical layer - it is part of the consent question, the privacy perimeter, and the clinical trust model.
Why SBOMs Are Turning Into the New Front Line of Software Risk
A new ENISA-focused discussion puts the Software Bill of Materials in a different light: not as paperwork, but as a control that can shape supply-chain visibility, governance, and regulatory readiness.
When Compliance Meets the Firewall, Policy Becomes a Live Test
NIS2 and DORA are pushing organizations toward proof, not promises, and NSPM sits in the gap between what security teams intend and what their networks actually enforce.
The AI Memory Trap: Why Deleting Data Is Not the Same as Making Models Forget
When personal data has already shaped an AI system, erasing the record is only the first step - the harder problem is removing its influence from the model itself.
DuckDuckGo Puts Link Cleanup on the Share Sheet
A new iPhone feature trims tracking parameters from copied URLs, turning a small privacy step into a default part of sharing.
South Australia Turns AI Into a Formal Test of Power, Risk, and Public Trust
A Royal Commission into artificial intelligence will put governance under a microscope, with the real stakes centered on control, accountability, and how public institutions handle fast-moving technology.
Europe’s New Software Rulebook Is Rewriting Open Source Responsibility
The Cyber Resilience Act is pushing open-source ecosystems toward named roles, traceable dependencies, and formal incident workflows long before many teams are ready.
Italy’s Influencer Market Is Learning That Trust Must Be Written Down
A tighter compliance mix around AGCOM, Digital Chart IAP, ATECO classification and INPS clarifications is pushing creator marketing toward clearer responsibility and cleaner disclosure.
When NIS2 Makes Incident Response a Boardroom Decision
The security question is no longer only how fast a team can contain an alert, but how quickly it can translate that alert into operational impact, supplier risk, communication needs, and the cost of interruption.
When Classroom AI Begins to Decide, Not Just Describe
Learning analytics are moving into a more powerful role in education, where software can shape paths, recommendations, and oversight questions at the same time.
Privacy’s Paper Shield Is Cracking Under Modern Data Risk
GDPR pushed privacy into the boardroom, but the real test is no longer paperwork: it is whether systems collect less, protect more, and resist misuse by design.
When a Single Word Becomes a Security Duty
In GDPR language, "shall" is more than grammar: it marks a binding obligation for the data controller to turn privacy principles into adequate protection.
The Hidden Cost of Making Trust Auditable
A debate about Made in Italy is really a debate about how far ESG compliance can stretch before it starts reshaping production, supplier oversight, and competitiveness.
Why Climate Risk Is Now an Auditor’s Problem
ISO management-system work is expanding beyond routine control checks, with climate-related context, risk, and emergency planning becoming part of what auditors are expected to examine.
City AI Is No Longer a Free Experiment: The EU Rulebook Is Already Biting
For Italian municipalities, the AI Act is turning routine tools like chatbots, smart cameras, and social-service software into compliance-sensitive systems that must be checked before they are trusted.