20,944 reputation
23698
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 5 months
seen 1 hour ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Feb
8
revised Insecure to require numbers in passwords?
added 349 characters in body
Feb
8
answered Insecure to require numbers in passwords?
Feb
8
revised How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
added 414 characters in body
Feb
8
answered How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
Feb
8
comment How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
I don't think CSP is an answer for this facebook case, as CSP is for limiting external domains can run code to a small subset. The individual webpages actively chose to include JS code from facebook.com so signed in users could like a page (so a click would say ajax push info to facebook's servers). Someone at facebook.com either accidentally or maliciously changed this information to automatically forward users to facebook.com.
Feb
8
comment How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
@Ramhound - I love how "dozens of sites" forwarding users (who are actively logged into facebook) being incorrectly forwarded facebook.com for a 15-20 minute period equals bringing down "half the internet".
Feb
8
revised How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
edited body
Feb
7
revised Minimum size of input text box required for XSS attacks
deleted 67 characters in body
Feb
7
answered Minimum size of input text box required for XSS attacks
Feb
6
awarded  Enlightened
Feb
6
awarded  Nice Answer
Feb
5
answered why blocking incoming traffic does not block chatting or VOIP
Feb
4
revised If someone hacks my wi-fi connnection, what can they see and how?
added 328 characters in body
Feb
4
comment If someone hacks my wi-fi connnection, what can they see and how?
@user20378 - the attacker can write a simple script to capture your data and then forward it to some server they control.
Feb
4
revised If someone hacks my wi-fi connnection, what can they see and how?
added 328 characters in body
Feb
4
answered If someone hacks my wi-fi connnection, what can they see and how?
Feb
4
awarded  Enlightened
Feb
4
comment is there a safe way to login to my gmail account from a public pc?
good advice, but this mostly doesn't consider hardware keyloggers that can be built into the keyboard or subtly inserted. And most public PCs probably do not look too kindly to booting up into another OS or running a random program from a thumbdrive.
Feb
4
awarded  Nice Answer
Feb
4
revised is there a safe way to login to my gmail account from a public pc?
added 1335 characters in body