27,986 reputation
458123
bio website storyinmemo.com
location San Francisco, CA
age 30
visits member for 4 years, 7 months
seen 13 hours ago

Moderator♦ on Security StackExchange

Ops fellow for some startup

Twitter: @jbferland


1d
comment Mod Security - How can I email alerts from logs for incident response?
Check out serverfault.com/questions/392878/… for starters
Jul
29
awarded  Nice Answer
Jul
24
awarded  Constituent
Jul
24
comment Does SSH password authentication provide the server with the password?
It's a solvable problem (server stores password with N+I iterations, client sends N, server computes I iterations). The technical reason to no due this is that the hash has similar vulnerabilities to a regular password in almost all cases. Further, the client and server must agree on a protocol with the client executing that code. Either a risk from code being push from server or an update nightmare for the client. Therefore, the KISS principle applies and passwords are sent plain via standardized encrypted links.
Jul
23
answered Does SSH password authentication provide the server with the password?
Jul
23
revised How does malware performs a UDP hole punch?
deleted 1 character in body; edited title
Jul
22
reviewed Leave Open How secure is socks5 proxy over ssh?
Jul
14
comment Password rules: Should I disallow “leetspeak” dictionary passwords like XKCD's Tr0ub4dor&3
Comments are not for extended discussion; this conversation has been moved to chat.
Jul
13
comment
In our last moderator election 3 years ago, Scott came in 2nd. He has maintained a presence in the site and chat since that time.
Jul
13
awarded  Caucus
Jul
13
wiki
Jul
13
answered Should traffic between two hosts in the same data center be encrypted?
Jul
11
reviewed Approve Using Tor browser to use YouTube, account security is the problem
Jul
8
comment Ali Express hijacking my Chrome
Discussion about whether this is on-topic in meta: meta.security.stackexchange.com/questions/1858/…
Jul
5
reviewed Edit How to know if certificate is self-signed
Jul
5
revised How to know if certificate is self-signed
Deleted tag, fixed sentences
Jul
5
answered Does a VPN Provider Know My MAC Address?
Jul
4
comment Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?
Comments are not for extended discussion; this conversation has been moved to chat.
Jul
3
revised Tool or Process to check for AES-NI support on processor?
added 102 characters in body
Jun
22
answered If I fill a hypothetical 1gb HDD with 1024 single 1mb files, will all sectors be overwritten?