233 reputation
19
bio website youtube.com/…
location Maryland
age 28
visits member for 1 year, 9 months
seen Apr 11 at 17:13

I am a professional programmer and web application tester. I'm sort of a jack of all trades because I work with almost every technology under the sun as a hobby, so most of the questions that appear on StackExchange sites are intensely interesting to me, and many of the answers that I come up with will prove useful to me in my pursuits in the future.

I have professional and serious hobby experience with system administration (client and server), desktop applications and web programming (mostly in higher level languages), audio processing and encoding, functional validation, and application security testing. My degree is in Computer Science but my interests are much broader than most of my peers.

Chances are, if you've got a question related to technology, I'm right there with you -- either I have the same question or have had it at some point in the past. I'll try my best to impart my own personal experience in the hopes that it is useful, but be wary that I sometimes jump the gun and post experiences that may not represent actual fact. I encourage everyone to verify the information they read on the internet before making important decisions based upon it, and my answers are no exception.

flair

flair2

flair3

speed test

speed test2


Apr
11
comment Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?
From a practical perspective, the most common way to exfiltrate data for a malicious client-side program running with user trust is to (1) capture keystrokes, and (2) send them to a remote server. Both LastPass and Chrome (and any other system involving passwords whatsoever) are wholly and completely vulnerable to this technique. You type your password and you're owned.
Jan
24
comment What are the major security concerns for smartphones?
Looks like you beat me by 1 minute talking about root stuff :) FGITW!
Jan
23
comment Apparently PayPal-affiliated site with very suspect security
Is it normal for two different EV certificates (for two different domains on .com) to have the same serial number but a different OU and O? How would this be possible? Maybe they have some kind of special agreement with Verisign only available to the largest of corporations (PayPal certainly qualifies as large)?
Jan
22
comment Apparently PayPal-affiliated site with very suspect security
I just made a new In-Private Tab in Firefox (thus, not using any of my main browser's cookies) and still was able to get in without entering a valid email. Not sure why you are seeing something different. Might be the restrictive proxy I'm using for web access, but in that case, the question becomes, why would a restrictive proxy allow you through, unless it's doing client-side validation :P
Jul
18
comment Citation Needed for FIPS Anecdote Regarding MD5 and RC4
The document you linked is very informative. I will be able to extract the info I need from it, thanks to your help, to make an educated argument to my superiors that we have a problem. Thank you!!
Jul
18
comment Citation Needed for FIPS Anecdote Regarding MD5 and RC4
What about RC4 as the stream cipher? And what about SSLv3? Sorry for the questions; your answer is already helpful as-is, but you seem to be on top of the issue...
Jul
18
comment How to securely set up wifi?
I also defend my product recommendation by the fact that, for all intents and purposes, Cisco hardware is the industry standard, an order of magnitude more forcefully than Microsoft Windows is the industry standard desktop operating system. So recommending Cisco is like recommending Ford when the Model T was the only car on the market.
Jul
18
comment How to securely set up wifi?
Google keywords: Cisco WPA2-EAP RADIUS IPSec. It's very difficult to set up a reliable and enterprise-grade wifi network without going with Cisco equipment, so although this is kind of a product recommendation, be aware that open source implementations of all the relevant protocols do exist, so if you had proper hardware, you could set something like this up on Ubuntu on a spare laptop using free software. It wouldn't be very reliable, from my experience, though -- and the config would be insanely tedious. If you don't want to go that route, "Aironet" is the Cisco product line for wifi.