892 reputation
39
bio website sarnold.org
location Lake Oswego, OR
age 35
visits member for 2 years, 11 months
seen Jul 19 '12 at 1:13

Paranoid pragmatic security type; I helped develop the AppArmor mandatory access control system. If AppArmor isn't a good fit for your security requirements, please consider running TOMOYO, SMACK, or SELinux.

For more information about me, including an abridged book list, see my careers2.0 profile. Or if you're old-school and want to see all my LaTeX skills on display, my old-fashioned resume is also available.


May
22
awarded  Yearling
Nov
15
awarded  Quorum
Jul
19
answered How to motivate co-workers to write unit-tests?
Jul
19
comment How to motivate co-workers to write unit-tests?
Pity there isn't a way to upvote individual paragraphs; so many excellent points. Overwhelming alone is worth a few votes... :)
May
22
awarded  Yearling
Mar
22
comment How to introduce a computer illiterate 50-year old to programming
@James: heh, I don't think I've ever seen the phrase, Interactive programs using ... PDF output before. :)
Mar
22
comment How to introduce a computer illiterate 50-year old to programming
Hrm, I broke down the skills into different categories to make the point that getting bogged down on syntax and semantics can cloud the development of the other skills -- a language with fewer arcane-feeling rules will let the abstraction flow easier -- but I appear to have not stated that point well.
Mar
22
answered How to introduce a computer illiterate 50-year old to programming
Mar
2
comment Would the concept of source code layers be of any use?
You may find Aspect Oriented Programming interesting.
Feb
24
comment Do gantt charts have a role in agile software development?
Did you co-worker know that the intention was not to come up with a rigid timeline?
Jan
10
awarded  Enlightened
Jan
10
awarded  Nice Answer
Jan
4
comment Programmers' concerns about export restrictions from the United States
I can't speak to why the Java keysizes are limited -- I do know that before the US regulations were relaxed, Cryptography in Java was extremely awkward, requiring a specific download from Sun to provide the algorithms. Of course, others filled the void, which just complicate matters further. Perhaps Sun / Oracle have an understanding with the US Govt to not make high-powered cryptography "too easy", perhaps they just haven't seen a need to extend the cryptography in Java since Bouncy Castle seems to be preferred anyway.
Dec
31
comment Programmers' concerns about export restrictions from the United States
If you're relying 100% on the host OS to provide the cryptography primitives, you don't have to do anything. :)
Dec
31
comment Programmers' concerns about export restrictions from the United States
It is my recollection that hashed passwords aren't one of the things they're interested in -- so if that's all your application does, you're almost certainly fine. I can't speak for what any other application authors do...
Dec
31
answered Programmers' concerns about export restrictions from the United States
Dec
13
awarded  Critic
Dec
13
comment Is there an expiration date for well regarded, but old books on programming?
-1: every week or two I see someone asking for an algorithm to handle something or other that Knuth has described in incredible detail. Just for fun: Name one sorting algorithm that is newer than 1981. Want to answer a parallel sort? Knuth has pages about sorting data in parallel. You might be right about the Python books but there's a huge difference between "Flavor of the week" books and engineering craft books.
Dec
7
comment Tools to help Agile team deliver value
This question would find a better audience at Programmers, where I've voted to migrate it -- however, I think they would want this question to be expanded upon significantly before it would be a "good fit" there. I'm not often over there, but I expect you should probably say what you liked / disliked about the tools you used and where your team has issues or doesn't see the promised improvement in quality, satisfaction, job satisfaction, etc..
Nov
23
comment Should code comments have scope?
I don't know what you mean by "tells the scope" -- but that's wise advice you received in the past. (Someone here once apologized for all their comments being in Russian -- but it was wonderful -- because I couldn't read them, they couldn't lead me astray. When debugging, definitely ignore the comments.)