27,841 reputation
457121
bio website storyinmemo.com
location Redwood City, CA
age 30
visits member for 4 years, 6 months
seen 2 hours ago

Moderator♦ on Security StackExchange

Ops fellow for some startup

Twitter: @jbferland


4h
revised Tool or Process to check for AES-NI support on processor?
added 102 characters in body
Jun
22
answered If I fill a hypothetical 1gb HDD with 1024 single 1mb files, will all sectors be overwritten?
Jun
19
comment Does the new Fedora package manager allow unauthorized installations?
@WoodrowBarlow: any changes to your sudoers file from default?
Jun
12
comment Why is Google still using a sha1 certificate on its own site when they are phasing them out in Chrome?
Sounds like a sufficiently exceptional case with quality enough information to me.
Jun
10
comment How do backdoors work?
How sly can they be? underhanded.xcott.com
Jun
8
answered Can other people monitor my internet activity in the same WiFi network?
Jun
7
revised Security Implications of Google's Two Step Authentication’s Backup Codes
rolled back to a previous revision
May
29
revised How do Travel Sentry locks work? (supposedly openable only by security agencies)
added 461 characters in body
May
27
awarded  Good Answer
May
26
comment Why did Facebook not use HSTS for a long time after it became available?
I'm guessing it's the fact that this last-bug-to-fix issue was cleared a few months ago.
May
26
awarded  Enlightened
May
26
awarded  Nice Answer
May
26
answered How do Travel Sentry locks work? (supposedly openable only by security agencies)
May
21
comment Why did Facebook not use HSTS for a long time after it became available?
I'm going to wedge this question back open. The historical reasons for a major site to have issues can be the present issues for much of the world. They can also provide a lesson that people can effectively learn from as we steer towards using HTTPS as a default over HTTP.
May
11
awarded  Favorite Question
May
8
awarded  Announcer
Apr
16
comment Deobfuscated Malicious PHP Code Comprehensively
I think that the real correct answer here is to use a debugger and set a breakpoint on the eval() line. Then you can see the exact string that is going to be eval()'d. This is probably going to be a meta discussion about getting a canonical answer to this.
Apr
16
comment Deobfuscated Malicious PHP Code Comprehensively
If you truncate the code then how can we we possibly answer?
Mar
30
reviewed Close Tracing stolen android tablet via MAC address
Mar
14
comment Getting password cracking time and byte storage from bruteforce?
Please oh please don't post an image of a block of text out of your textbook. It's just rude.