22,016 reputation
337102
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 10 months
seen 9 hours ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Mar
12
comment Why for some SSL websites browsers show extra info, while for others dont
The benefit of EV certificates is they do fact checking. So if an attacker manages to get a domain like thepaypal.website, the attacker could get regular class-1 SSL certificates for it, but not EV ones as they would not be able to prove they are legal identity paypal.
Mar
12
comment Why for some SSL websites browsers show extra info, while for others dont
-1 - This is wrong. Self-signed certificates will present a scary dialog "Don't trust this connection". The no green box is for regular CA signed class-1 certificates. This validates that the owner of the certificate also controls the domain. (E.g., you bought example.com and can receive emails at admin@example.com). The certificates with the large green boxes are the extended validation certificates which verify that a domain belongs to a real life organization (and the green box displays what organization).
Mar
11
answered Temporarily save failed logins password hashes for using against brute force attack
Feb
13
awarded  Nice Answer
Jan
27
awarded  Enlightened
Jan
27
awarded  Nice Answer
Jan
11
awarded  network
Jan
10
answered Parallel systems, in case any of two has known exploits
Dec
17
awarded  tls
Dec
12
answered What is the safest way to ssh to a machine behind a router?
Nov
27
revised Can a form submission be encrypted even though address bar shows HTTP?
added 62 characters in body
Nov
26
answered Can a form submission be encrypted even though address bar shows HTTP?
Nov
20
comment Is Certificate-Based Authentication Really Better Than Password Authentication in OpenSSH?
@user10008 - My mistake. I thought "or better" was responding to DigitalChris not to TomLeek. My bad.
Nov
20
comment Is Certificate-Based Authentication Really Better Than Password Authentication in OpenSSH?
@user10008 - Disabling password entry in /etc/shadow is probably not desirable, as typically you may want the ability login to the machine via password when you are physically present (without requiring any of the standard tricks like booting into single user mode or mounting the hard drive from a live cd/usb and editing /etc/shadow ). You would also have to replace the password entry for every user to have the equivalent to PasswordAuthentication no.
Nov
18
awarded  Famous Question
Nov
14
comment Truly deniable encryption
What prevents the adversary from cloning the encrypted hard drive first before typing any passwords? (E.g., if a nuke password is given, just copy the clone again);
Nov
13
revised Are passwords stored in the cookie? encrypted?
added 121 characters in body
Nov
13
awarded  Nice Answer
Nov
13
answered Are passwords stored in the cookie? encrypted?
Nov
8
comment help identifying an IP address from email sent from my gmail account
The only IP address in there is 10.25.30.3 -- an internal IP address used by a google server. (IP address that start with 10. are used for private internal IP addresses ). Change your password and/or enable 2-factor authentication. Don't access your email on public computers that you do not control (and could be using a keyloggers to steal passwords).