21,578 reputation
33699
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 7 months
seen 15 hours ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Oct
16
revised Is the option to jump to blanks in password fields a security risk?
added 2 characters in body
Oct
16
answered Is the option to jump to blanks in password fields a security risk?
Oct
15
revised What are the odds of an RSA private key collision?
Wrong word used when expanding gcd pointed out by Nefrubyr but already rejected by others by the time I saw it.
Oct
15
awarded  Good Answer
Oct
14
revised What are the odds of an RSA private key collision?
added 167 characters in body
Oct
14
comment What are the odds of an RSA private key collision?
@Brilliand - Yes that was my intention -- apparently I left out the word times. 10^34 * 10^40 != 10^75, but 10^75 isn't some magic spot but roughly where you start to worry; sqrt(N) is easy to remember point for collision attacks for mental math. Doing the math, at 3x10^34 primes, there's a 10^-81 chance of collision (similar to chance of winning powerball jackpot 10 times in a row playing only 1 ticket each time), at 10^74 a 0.03% chance, at 10^75 a 2.6% chance, at 10^75.5 there's a 23% chance, at 10^76 there's a 92.9% chance, and at at 10^77 its 100% chance (off from 1 by 10^-114 %).
Oct
14
comment What are the odds of an RSA private key collision?
@DavidFoerster - Agree colliding fingerprints are a problem, though with SHA-2 signed certificates (the minimum recommendation these days) you have 256-bit which provides 128-bits of security against collision attacks, assuming SHA-2 doesn't have major weaknesses above brute force. This is the reason SHA-1 are being deprecated as it is feasible for a collision attack on a 160-bit SHA-1 key from rogue government-type attackers to fake an intermediate certificate authority via a collision attack)
Oct
14
awarded  Enlightened
Oct
14
awarded  Nice Answer
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
revised What are the odds of an RSA private key collision?
added 1127 characters in body
Oct
14
answered What are the odds of an RSA private key collision?
Oct
5
answered Principal DOM Based XSS detect using python
Sep
30
awarded  Explainer
Sep
24
awarded  Autobiographer
Sep
19
comment Facebook drops SSL
@user10008 and @joozek - Facebook has a Strict-Transport-Security header for me when I am logged in. However, if I just run curl -I https://www.facebook.com, I do not see an HSTS header. According to this answer using transport layer security is a configurable option on facebook.
Sep
16
answered How session cookies work?
Sep
10
answered Opinions on my “Encryption at rest” implementation idea
Sep
5
awarded  Nice Answer