320 reputation
115
bio website ali.moeeny.com
location Washington, DC
age 36
visits member for 3 years, 2 months
seen Sep 23 at 17:47

I love to build things that people love to use.
I like scientific data analysis.
I've spent most of my life in medicine and neuroscience!
I like: vim, zsh, golang, debian, python I am addicted to writing code! and learning new things!!


Jan
18
comment Who (which process) is calling curl?
Fantastic, it was prey preyproject.com ! I didn't know it keeps checking my connectivity by curling google.com . Phew!
Jan
17
comment Who (which process) is calling curl?
Really? lsof -i should show curl itself but not the parent process (the one calling curl).
Dec
6
comment How can I keep my identity anonymous as a website owner/administrator?
Very tricky business, be very careful.
Dec
1
comment What are the security implications of SSH tunneling?
Aha! Got it, that is correct, if a tunnel exposes a vulnerable machine/service to the public side I have practically punched a hole into the defenses.
Dec
1
comment What are the security implications of SSH tunneling?
So if I understand it correctly, having people open a tunnel when they need it by ssh -D ... from either side is no "additional" problem (more than giving people ssh access in the first place).
Nov
30
comment What are the security implications of SSH tunneling?
thanks, so if the users are not potential trouble makers, and they already need to SSH into the edge machine for other reasons, both from the internal lan and from the public lan, and from home via VPN, there is no "additional" problem with tunneling all by itself, correct?
Sep
7
comment I see two different sets of certificates for Google websites when I am at work and when I am at home
All the metadata (as well as the SHA1 and MD5 which is displayed in the FF certificate viewer) are exactly the same! Only when I export them they are different!
Sep
6
comment I see two different sets of certificates for Google websites when I am at work and when I am at home
I would do it tomorrow and post the result here.
Sep
6
comment I see two different sets of certificates for Google websites when I am at work and when I am at home
So Basically the certificate itself could not be used to verify if it is valid or not, unless you can check if it is signed by a valid CA (or the valid CA) is the key?
Sep
6
comment I see two different sets of certificates for Google websites when I am at work and when I am at home
@iszi What details would be helpful? You mean like date issued and expiration date and ...?
Sep
6
comment I see two different sets of certificates for Google websites when I am at work and when I am at home
Is it possible for the proxy admin, to get (given the authority, and access to a root CA) a key to sign the packets on behalf of google or anybody else so that they'd be able to inspect the packets and enforce some internet connection policy? (I mean just to avoid tampering with the browsers so that they accept the ssl proxy's signature)