meta user
network profile
| bio | website | |
|---|---|---|
| location | Brooklyn, NY | |
| age | 31 | |
| visits | member for | 2 years |
| seen | 11 hours ago | |
| stats | profile views | 274 |
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.
Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.
Mostly program/script in python, django, and jquery these days doing mostly web apps.
Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.
Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).
|
Feb 8 |
comment |
Insecure to require numbers in passwords? @B-Con - The actual calculation is straightforward to do; and shows the requirement of a number eliminates about 26% of password; reducing the entropy by about 0.45 bits |
|
Feb 8 |
comment |
Insecure to require numbers in passwords? Requiring a number in a 12-character password randomly generated from ASCII printable symbols removes 26% of randomly generated passwords (85/95)**12. (There are 95 printable ascii chars, and 85 of them aren't numbers; so the chance they all are not numbers is 85/95**12.) This barely makes a dent in the entropy - changes from ~78.8 bits to ~78.4 bits. |
|
Feb 8 |
revised |
Insecure to require numbers in passwords? added 349 characters in body |
|
Feb 8 |
answered | Insecure to require numbers in passwords? |
|
Feb 8 |
revised |
How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site? added 414 characters in body |
|
Feb 8 |
answered | How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site? |
|
Feb 8 |
comment |
How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site? I don't think CSP is an answer for this facebook case, as CSP is for limiting external domains can run code to a small subset. The individual webpages actively chose to include JS code from facebook.com so signed in users could like a page (so a click would say ajax push info to facebook's servers). Someone at facebook.com either accidentally or maliciously changed this information to automatically forward users to facebook.com. |
|
Feb 8 |
comment |
How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site? @Ramhound - I love how "dozens of sites" forwarding users (who are actively logged into facebook) being incorrectly forwarded facebook.com for a 15-20 minute period equals bringing down "half the internet". |
|
Feb 8 |
revised |
How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site? edited body |
|
Feb 7 |
revised |
Minimum size of input text box required for XSS attacks deleted 67 characters in body |
|
Feb 7 |
answered | Minimum size of input text box required for XSS attacks |
|
Feb 6 |
awarded | Enlightened |
|
Feb 6 |
awarded | Nice Answer |
|
Feb 5 |
answered | why blocking incoming traffic does not block chatting or VOIP |
|
Feb 4 |
revised |
If someone hacks my wi-fi connnection, what can they see and how? added 328 characters in body |
|
Feb 4 |
comment |
If someone hacks my wi-fi connnection, what can they see and how? @user20378 - the attacker can write a simple script to capture your data and then forward it to some server they control. |
|
Feb 4 |
revised |
If someone hacks my wi-fi connnection, what can they see and how? added 328 characters in body |
|
Feb 4 |
answered | If someone hacks my wi-fi connnection, what can they see and how? |
|
Feb 4 |
awarded | Enlightened |
|
Feb 4 |
comment |
is there a safe way to login to my gmail account from a public pc? good advice, but this mostly doesn't consider hardware keyloggers that can be built into the keyboard or subtly inserted. And most public PCs probably do not look too kindly to booting up into another OS or running a random program from a thumbdrive. |
