299 reputation
1312
bio website earlz.net
location Cleveland, OH
age 23
visits member for 3 years, 7 months
seen Jul 28 at 16:05

Hello there! My name's Jordan Earls and I'm a programmer. Recently, I've been doing almost exclusively work in .Net with C#, a bit of raw IL, and in some cases a hefty serving of code generating T4(it's the meta-future!). Sometimes I do a bit of embedded/electronic work with C and C++(http://mbed.org rocks, btw). And finally, I have at least some competence in Ruby, Delphi, and Javascript.

I currently work for PreEmptive Solutions on the Dotfuscator team and troll the dotfuscator tag on occasion.

Most of my personal projects are open source and BSD licensed. The majority of them are at bitbucket with the rest of them being listed on github

Also, you can follow me on the twitters @earlzdotnet


Jul
27
awarded  Famous Question
Jul
2
awarded  Curious
Apr
23
awarded  Popular Question
Jul
16
awarded  Notable Question
May
4
awarded  Popular Question
Apr
28
comment Are there any uses of having a non-deterministic salt value for hashes?
Yea, the DoS possibility really shows as a huge weakness to me. Still think it's a cool idea, but maybe it's practically useless
Apr
28
awarded  Editor
Apr
28
revised Are there any uses of having a non-deterministic salt value for hashes?
added 297 characters in body
Apr
28
comment How does pfsense block torrent traffic?
Note: I've always thought it to be impossible(especially when using encrypted torrents), but I have a friend who apparently cracked the code to doing 100% blocking of bittorrent at the gateway, assuming VPNs and such aren't involved. No idea how he did it, but last I heard he was trying to sell it to some big networking names
Apr
28
asked Are there any uses of having a non-deterministic salt value for hashes?
Apr
17
accepted With ASIC bitcoin miners, should SHA256 be considered insecure for password hashing?
Apr
15
comment With ASIC bitcoin miners, should SHA256 be considered insecure for password hashing?
Well, it seems that it was always "good enough" when compared to md5 and is the default in many authentication setups
Apr
15
asked With ASIC bitcoin miners, should SHA256 be considered insecure for password hashing?
Apr
3
asked Following redirects from HTTPS to HTTP - Secure?
Feb
25
comment How can I encrypt something user provided without risk of the key being exposed?
@Seth make that into an answer and I'll accept it. I just know you can't be too careful when dealing with security
Feb
25
asked How can I encrypt something user provided without risk of the key being exposed?
Dec
1
accepted Is my session-less authentication system secure?
Nov
30
awarded  Critic
Nov
30
comment Is my session-less authentication system secure?
Well, maybe I meant BCrypt instead of Blowfish. Either way, the hash function that's considered very secure and with an adjustable workload. Thanks for the thorough analysis though. I'll have to research length extension attacks more. Also, good note about the file vulnerability bit. The only time I've ever seen this type of key-fetching used though has been with coprocessors dedicated for signing certificates. Could you give more information about how that could be done securely?
Nov
30
comment Is my session-less authentication system secure?
@AD7six so if I don't like ASP.Net's built in authentication, I should choose another platform. That seems logical.