20,944 reputation
23698
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 5 months
seen 1 hour ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


1d
awarded  Good Answer
Oct
17
comment Is the option to jump to blanks in password fields a security risk?
@CommuSoft - Agreed. Even if you do encrypt your hard drives, any attacker targeting you with physical access can surreptitiously insert a HW keylogger between your keyboard and computer to get your encryption passphrase.
Oct
17
awarded  Nice Answer
Oct
16
awarded  Nice Answer
Oct
16
comment Is the option to jump to blanks in password fields a security risk?
@stuXnet The flaw in that scenario is giving her any access to your computer while the password is typed in. A good password will have some ~60+ bits of entropy (to prevent the hash from being cracked offline); knowledge of a few spaces/special characters reduces it by maybe a dozen bits, but out of the realm of an online attack. If she can secretly find the spaces in the password field, she could say accidentally erase/alter it and force you to retype it (and gain more information by watching you type). Or she gets a confederate to come distract you for a second.
Oct
16
comment Is the option to jump to blanks in password fields a security risk?
@stuXnet - Can you think of a scenario where this could gain any info about the password via this attack, where you couldn't recover the complete password via javascript:var inputs=document.getElementsByTagName('input'); for( var i=0; i < inputs.length; i++ ) { if (inputs[i].getAttribute('type') === 'password') alert(inputs[i].value) }? As an analogy, having the last 4 digits of your credit card # on your receipt stored by a business isn't a security risk, as you just handed your full credit card (with your name, the full number, exp date, CVV, etc) to the person who swiped it.
Oct
16
revised Is the option to jump to blanks in password fields a security risk?
added 2 characters in body
Oct
16
answered Is the option to jump to blanks in password fields a security risk?
Oct
15
revised What are the odds of an RSA private key collision?
Wrong word used when expanding gcd pointed out by Nefrubyr but already rejected by others by the time I saw it.
Oct
15
awarded  Good Answer
Oct
14
revised What are the odds of an RSA private key collision?
added 167 characters in body
Oct
14
comment What are the odds of an RSA private key collision?
@Brilliand - Yes that was my intention -- apparently I left out the word times. 10^34 * 10^40 != 10^75, but 10^75 isn't some magic spot but roughly where you start to worry; sqrt(N) is easy to remember point for collision attacks for mental math. Doing the math, at 3x10^34 primes, there's a 10^-81 chance of collision (similar to chance of winning powerball jackpot 10 times in a row playing only 1 ticket each time), at 10^74 a 0.03% chance, at 10^75 a 2.6% chance, at 10^75.5 there's a 23% chance, at 10^76 there's a 92.9% chance, and at at 10^77 its 100% chance (off from 1 by 10^-114 %).
Oct
14
comment What are the odds of an RSA private key collision?
@DavidFoerster - Agree colliding fingerprints are a problem, though with SHA-2 signed certificates (the minimum recommendation these days) you have 256-bit which provides 128-bits of security against collision attacks, assuming SHA-2 doesn't have major weaknesses above brute force. This is the reason SHA-1 are being deprecated as it is feasible for a collision attack on a 160-bit SHA-1 key from rogue government-type attackers to fake an intermediate certificate authority via a collision attack)
Oct
14
awarded  Enlightened
Oct
14
awarded  Nice Answer
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
answered What are the odds of an RSA private key collision?
Oct
5
answered Principal DOM Based XSS detect using python