Author Archives: Eric Vétillard

The misuse of bytecode verification

Bytecode verification has been an interesting debate since the very beginning of Java Card. Back then, in 1997, Java was very much about Java applets, and the bytecode verifier was the essential piece of software that allowed untrusted code to run in a browser efficiently (i.e., without doing expensive runtime checks, and without having to

Visting Gemalto in Gémenos

During the past few months, I have very often visited Gemalto in Gémenos or La Ciotat. I didn’t like it much, since it kept me away from my family. However, although I am very happy right now in Sophia Antipolis and don’t want to move from there, I was born and raised in Marseille, and

Hijacking NFC Tags

I have been thinking about tags for as a background task for a while, and one of my directions has been to look at the “hijacking” of tags. Here, I am not talking of replacing some tags by other tags (for instance pushing toward a competitor of a smart poster’s rightfful owner), as thie defnitely

Open Source, GlobalPlatform, and Java Card

The two concepts of open source and smart cards have not gone well together. There are some projects about specific applications and corresponding terminal-side software, such as the Muscle project for Linux, and the JMRTD library for e-passports (if you have one that you want me to mention, let me know). However, there are really

My Last Day at Trusted Logic

Today is my last day at Trusted Logic, after a bit more than 11 years. It has been a great adventure, and I really enjoyed the small company feeling, where one has to deal with one thousand different activities, giving many opportunities to learn on different fields. As I try to think about successes and

PINs still under attack!

This summer was very interesting for new attacks. There are two that I really liked, for very different reasons. They are also both attacks on PIN codes, yet they are quite different. The first one is an attack on ATMs, with a thermal camera, hoping that your fingers stay on the keys long enough to

GoogleIO suggestions for new NFC apps

GoogleIO is happening right now in San Francisco. On the agenda, there has been (only?) one talk on NFC in the Android track. During this talk, the speakers gave an introduction to NFC technology, but for someone who knows the basics on NFC, the most interesting parts were the demos, showing interesting NFC applications. But

The government wants us to protect our assets

The French government has recently published a law, and some details of the application degree have led to strong reactions from the industry, including a suit by the French association of social online services. The suit is about a recent law that forces sites to retain a lot of information about their users, and to

The Personal Web

Doc Searls’ latest post points to a post by Louis Ray defining the third wave of the Web (a.k.a. Web 3.0) as the Personal Web. The value of the first wave was in the information itself (static Web, a.k.a. Web 1.0); the value of the second wave was in the sharing of information (social web,

Amazon does little shifts

So, Amazon is launching an online music service, where you can store your music on their servers and then stream it to your devices. This is impressive, and as mentioned by some, we are getting closer to the mythical GDrive. Amazon’s announcement gives us a very cheap online storage: by just buying one album on