244 reputation
111
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 7 months
seen Dec 12 at 10:21
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Aug
18
answered iptables redirect IP address
Aug
18
revised iptables redirect IP address
added 2 characters in body
Aug
18
revised iptables redirect IP address
deleted 2 characters in body
Aug
18
awarded  Editor
Aug
18
revised iptables redirect IP address
added 43 characters in body
Aug
18
asked iptables redirect IP address
Aug
18
comment Running iPad Apps without an iPad?
I'm also pretty sure that the dev SDK requires purchasing macs and will not work in windows. stackoverflow.com/questions/3757319/…
Jul
28
awarded  Student
Jul
28
comment memtest86+ errors - how are memory locations divided among multiple DIMMs?
Thanks. Upvotes to both of you; (I gave Chopper3 the answer as its essentially the same as yours but prior by 9 minutes).
Jul
28
awarded  Scholar
Jul
28
accepted memtest86+ errors - how are memory locations divided among multiple DIMMs?
Jul
28
asked memtest86+ errors - how are memory locations divided among multiple DIMMs?
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
Develop good password change functions, rather than record users current passwords and force a change. E.g., on the password change screen the user types inputs both old_pass & new_pass. Develop a series of automated checks; e.g., that no more than two characters in old_pass are in new_pass in the same location; or that in any order there no more than 4 characters are reused in any location. Furthermore, check that new_pass wouldn't work as any of the old pw. Yes, one could get away a series of unsecured passwords like rfvujn125 / jgwoei125 / rfvujn126, but that should be acceptable.
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
I disagreed with the "It is your job to make sure those records are available, accurate, and secure." You have an obligation to keep your system secure; unreasonable requests (like store & share plaintext passwords) should not be done if they compromise the system. Storing, recording, and sharing plaintext passwords is a major breach of trust with your users. It is a big red flag security threat. The security audit can and should be done without exposing plaintext passwords/ssh private keys; and you should let the higher ups know and resolve the issue.
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
I agree sending fake data is unethical and undermines the entire auditing system -- if people rely on your data being accurate and you send false data then the audit is broken. I edited my post to get it under the char limit; and on reread that point got edited out. I wanted to also say that its downright stupid to fake this data (e.g., passwords) as its easily checked and once found that its faked, responsibility falls solely on you. (Its like how murder is unethical on its own; but its even stupider to do it in a manner where you will get caught.)
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
I disagree. The "auditor" was bullying OP into divulging information that would undermine the entire IT security of the organization. Under no circumstances should OP generate those records and provide them to anyone. OP should not fake records; they can easily be seen to be fake. OP should explain to higher-ups why the security auditors demands are a threat either through malicious intentions or utter incompetence (email passwords in plaintext). OP should recommend immediate termination of the security auditor and a full investigation into other activities of the former auditor.
Jun
15
comment Older UPS smells like burning
-1 for recommending taking the UPS apart with no safety warning. Taking a UPS apart can be lethal if you don't know what you are doing. See: upsystems-inc.com/papers/maintenance.pdf though I would just recommend replacing it.
Jun
15
awarded  Critic
Jun
13
awarded  Teacher
Jun
13
answered Is a Self Signed SSL Certificate a False Sense of Security?