23,473 reputation
342102
bio website storyinmemo.com
location Redwood City, CA
age 29
visits member for 3 years, 4 months
seen 10 hours ago

Moderator♦ on Security StackExchange

Production Engineer at Facebook

Twitter: @jbferland


Apr
13
comment Secure Way of Encrypting Your Bash Shell Script
You should edit your question to describe a secure way of storing credentials rather than focusing on DRM. You should also further elaborate on what the same level of access is. There are ways to expose a credential only during use of which the first thought of mine is via an RPC call to a hardware USB token that requires you to touch it.
Apr
11
comment Do I need to worry about my SSH keys if my system was vulnerable to Heartbleed?
Note: re-opened for relative importance and uniqueness. Kind of a dupe, but one I consider worthy since "kind of".
Apr
9
answered How can I tell if a site is using open SSL, and which version?
Apr
9
comment What was so dangerous about PGP that its creator was charged in court for it?
It'd be awesome if you could expand this into a more detailed answer.
Apr
9
awarded  Enlightened
Apr
9
awarded  Nice Answer
Mar
30
awarded  Necromancer
Mar
23
awarded  Announcer
Mar
20
comment Does Facebook store plain-text passwords?
@MichałŠrajer Currently, Facebook tests fully inverted case on login. Facebook tests fully inverted case and first letter case inversion on password change.
Mar
17
comment Does Facebook store plain-text passwords?
This answer is how Facebook does it. Source: I've read and modified the source code for password checking.
Mar
4
answered Hacking through a firewall
Mar
4
awarded  Nice Answer
Mar
3
revised Social login - authenticate if email exists or create new user
added 29 characters in body
Mar
3
answered safe methods of generating session keys
Mar
3
answered Social login - authenticate if email exists or create new user
Feb
26
awarded  Popular Question
Feb
24
awarded  Enlightened
Feb
24
awarded  Nice Answer
Feb
23
answered What makes it difficult for Facebook to implement restriction/ACL for accessing uploaded photo?
Feb
22
answered Why doesn't Facebook use HSTS