I like social software, data storage, audio, crypto, dynamic languages, and UI design.

Currently at Couchbase; lead developer of Couchbase Mobile for iOS (previously known as TouchDB) and the Couchbase Sync Gateway server.

Ex-Apple, and an incurable Apple fanboy.

Jul
27
comment File encryption that supports random read access?
(a) Decrypting the entire file certainly doesn't count as efficient random access. (b) Your shellscript doesn't show where the encryption keys come from, which is the tricky part. (c) Your point about key safety doesn't make sense to me since I was talking about deriving chunk keys from the master key, so there's no key management problem.
Jul
27
answered Decrypting arbitrary offset of encrypted file
Jul
26
comment File encryption that supports random read access?
That addresses how to get a key for every chunk (and I also realized that NaCl / libSodium takes a nonce value that could just be a chunk offset.) There's more to the implementation than that, though, and I'd still rather use a library than write it myself.
Jul
26
answered Is Cryptree suitable for cloud storage?
Jul
26
awarded Student
Jul
26
asked File encryption that supports random read access?
Jul
26
awarded Autobiographer
Jul
1
comment CFHTTPMessageAddAuthentication fails to add authentication data to request
I looked up error -1000 on osstatus.com — it's kCFStreamErrorHTTPAuthenticationTypeUnsupported (as defined in CFHTTPAuthentication.h.) Which implies digest auth isn't supported; that's strange. Also, domain 4 is kCFStreamErrorDomainHTTP.
Jun
30
comment Couchbase mobile replication through REST-API
Oops, forgot that the Return key ends a comment! Also meant to say that you can use a replication filter to prevent a design doc from being pushed.
Jun
30
comment Couchbase mobile replication through REST-API
@Bert, I suggest filing an issue against Sync Gateway. I tried a PUT to a design-doc URL and got a 403, but it may be that when it's uploaded as part of a bulk_docs call it still returns 400.
Jun
29
comment Couchbase mobile replication through REST-API
Heh. I wouldn't say they're "petty" — the rules make sense from a security standpoint since they eliminate a wide variety of remote-code-execution vulnerabilities from buggy interpreters (like Flash.) "Overly strict" perhaps.
Jun
26
answered Couchbase mobile replication through REST-API
Jan
28
awarded Student
Jan
28
asked Exchange account in Mail has wrong username, but is not editable
Jan
28
awarded Autobiographer
Jan
25
awarded Yearling
Jan
25
awarded Autobiographer
Jan
1
awarded Nice Answer
Sep
24
awarded Autobiographer
Sep
24
awarded Autobiographer
1 2 3 4 5