22,759 reputation
342106
bio website
location Brooklyn, NY
age 34
visits member for 4 years, 2 months
seen yesterday
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Feb
21
comment Does disabling right click have any impact on security?
+1 - I somehow missed your answer until right after I posted something very similar. I suspect this is the case, though obviously there are saner ways of doing preventing back/forward navigation from double committing a transaction.
Feb
21
answered Does disabling right click have any impact on security?
Feb
21
reviewed Approve Checking if notebook is clean of hardware spyware
Feb
20
revised What is the point of hashing passwords?
added 150 characters in body
Feb
20
awarded  Nice Answer
Feb
19
answered non-periodic event detection
Feb
18
answered Strategies to store/remember very long password?
Feb
18
comment Strategies to store/remember very long password?
Great answer; however its incompatible with your accepted answer to the referenced question -- use a one-time-pad. A one-time pad cannot be derived from a 128-bit entropy passphrase to encode anything longer than ~128-bits and still benefit from the unbreakable properties of being a OTP. In fact, using a one-time pad generated from a ~128 bit passphrase will more likely be easily breakable with standard cryptographic techniques.
Feb
17
reviewed Reject What is ASN.1 usage in SSL protocl and What's the risk of using it?
Feb
17
awarded  Custodian
Feb
17
reviewed Approve Need advice on linux server being hacked
Feb
16
comment An attack from my Employer
Expect your boss to monitor (and potentially alter) any sites you visit unless you encrypt your data. Only trust https/ssh/vpn or similar (with trusted keys or known fingerprints) for secret info. This prevents man in the middle attacks or eavesdropping on anything other than the level of traffic and the IP address you are communicating with. As Bob Watson's great advice, a SOCKS proxy is simple to setup with ssh (setup ssh server at yourdomain.com, go to terminal run ssh -fND localhost:12321 you@yourdomain.com and in a browser setup SOCKS proxy to port 12321) to encrypt all your traffic.
Feb
15
comment Can you really change the password to a mac on reboot without knowing the old one?
Ubuntu removed booting into single user mode? Since when and why? Without full disk encryption that requires popping in a live cd, mounting the old hdd and editing /etc/shadow to something known.
Feb
15
awarded  Custodian
Feb
15
reviewed No Action Needed Is this SSO design secure?
Feb
15
revised Is it safe to mix authentication methods?
added 572 characters in body
Feb
15
revised Is it safe to mix authentication methods?
added 474 characters in body
Feb
15
answered Is it safe to mix authentication methods?
Feb
14
comment Hiding JavaScript source code
@Travis - Can (client-side) JS be hidden by ____? No. For the browser to run the JS, it has to download it. I have no idea what "session layer for PHP" means. TCP/IP doesn't really have an OSI session layer (HTTP would be the application layer being equivalent of layers 5-7), though HTTP typically does (user) sessions via session cookies (unique text strings identifying a user like a guid) in HTTP request headers. I'm not aware of any browser that runs JS delivered via a cookie or HTTP header, and if one did it still wouldn't be "hidden" as it would be easily retrievable.
Feb
14
answered How to protect files (cron files) frome being executed by everyone?