SAFEHEXER
Magister du secure coding
Profil professionnel
Transforme des logiciels fragiles en applications durcies. Expert en secure coding et en refactoring sûr.
Compétences clés
Secure coding; refactoring avancé; DevSecOps; durcissement des applications; mitigation OWASP
Réalisations majeures
Refonte du cœur d’une application bancaire, réduisant de 98 % les risques du Top 10 OWASP.
Articles de SAFEHEXER
When Digital Systems Start Reading Us Back
A new reminder from the privacy debate: connectivity does more than connect people - it can also expand surveillance, strengthen profiling, and widen the gap between those who understand the system and those who are tracked by it.
When Telemarketing Becomes a Proof Game in Energy Sales
A compliance shift in the energy sector puts documentation at the center of telemarketing: consent, data origin, and the digital trail leading to the final commercial call.
When AI Training Starts Watching Employees, Security Becomes the Product
A paused internal AI program shows how raw telemetry, broad access, and weak control design can turn workplace data into an internal risk surface.
Italy’s PEC Registry Fine Exposes a Quiet Privacy Fault Line
A 55,000-euro sanction over professional PEC records shows how registry transfers can become a privacy and compliance problem long before anyone talks about a breach.
NIS2 Pushes Cybersecurity Down the Supply Chain, and SMEs Feel the Pressure
The EU’s updated cyber rulebook is not only about regulated operators anymore - it is also reshaping how small suppliers prove they can be trusted.
Italy’s Public Data Puzzle: How to Reuse Information Without Re-Identifying People
Public-sector data can power analytics and AI, but the real security question is whether privacy controls survive linkage, reuse, and inference.
When the Demo Works but the Data Won't Budge, AI Stalls in the Hallway
A polished pilot can still die in governance limbo if no one can settle who owns the data, who can approve its use, and how production changes will be controlled.
The Rulebook Gap Around Judicial Data Is a Compliance Risk Waiting to Be Mapped
Judicial data is already fenced by strict privacy limits, but the missing ministerial decree tied to art. 2-octies keeps one practical question open: how to apply the law with precision.
AI Compliance Is Moving Into the Code Path, Not the Paper Trail
For many AI deployments, privacy review is no longer a late-stage legal check: technical documentation, risk assessment, human oversight, and training-data governance now shape how the system is built and whether it can be launched responsibly.
June 30 Turns Telco Compliance Into a Security Test
Under NIS2, essential and important entities must send ACN a categorized list of activities and services, and for telecom operators that filing can shape how security measures and function ownership are organized.
When a Screening Model Becomes a Legal Actor
A California case is testing whether an AI hiring workflow can be treated as more than software when it meaningfully shapes who gets filtered out.
Dubai’s Fintech Rulebook Is a Trust Engine, Not Just a Growth Plan
The DIFC and DFSA are building a model where regulatory speed, digital-asset oversight, and international cooperation move together.
ACN Redraws the Crypto Map for the Post-Quantum Era
Updated guidance on cryptographic functions turns post-quantum readiness into a practical task for signatures, TLS, and crypto-agility.
Britain’s Under-16 Social Media Clampdown Puts Age Checks Under the Microscope
A child-protection rule can sound straightforward, but any system that tries to prove age at scale can quickly become a privacy and security problem of its own.
Facial Recognition After the Fact: Italy’s New AI Rules Test the Limits of Biometric Power
A new AI decree on after-the-fact face matching for security purposes may look narrow on paper, but it raises a wider question: when does an investigative tool become a biometric surveillance system?
Who Holds the Keys When Control Becomes the Real Battlefield
A debate over key sovereignty is forcing a harder question: when encryption matters most, who actually gets to decide how the keys are handled?
Europe’s SME Data Maps Are Fuzzy, and That Is the Real Risk
A new compliance warning shows that many small businesses cannot clearly trace where stored data lives, turning sovereignty into an operational test, not just a policy phrase.
Age Checks, Not Just Age Limits: Britain’s Social Media Plan Opens a New Security Front
The announced under-16 restriction is also an identity and privacy problem, because every age gate forces platforms to choose how much proof they need and how much data they are willing to collect.
The EU’s Siri Problem: When Interoperability Collides With Assistant Security
A delayed Siri AI rollout in the EU has turned the DMA into a real-world test of whether platform openness can coexist with a private, high-trust assistant.
Britain Draws a Hard Age Line Around Social Platforms
The UK’s under-16 access plan is a policy move, but its real test will be how platforms classify services and enforce age-based limits without overreaching.