About Me

I am a web security engineer for Mozilla, where I work on browser security and web application security. You can read about some of the books I've read, check out some of my posts, or just drop me a line.

I'm also married and you can check out our website including our photo gallery which we update frequently.


What's New

01/25/10 - Since there have been many requests over the years for the source code referenced in my A-Star (A*) Algorithm post, I decided to share it. I did a bit of refactoring too, as I have learned some neat things about Python in the years since I wrote that post, like list comprehensions.

10/01/09 - I am excited to report that Content Security Policy is available for testing! We've been working hard on implementing the CSP spec and now the new features are ready to be put to the test. I would like to encourage any interested parties, whether web security researchers or website administrators, to grab a preview build of Firefox with CSP enabled and head over to the demo page to see it in action.

04/07/09 - I published another set of changes to the Content Security Policy proposal. We are getting very close to the implementation phase now, and I've made a final call for feedback. Sid and I are in the process of moving the documentation to the Mozilla Wiki, where the final specification will live.

04/04/09 - I fixed two bugs in my AES implementation. The first was a padding bug which resulted in the loss of up to a block of data when decrypting certain ciphertexts. The second bug was a more serious security problem caused by the use of a static initialization vector.


East Bay Psychotherapist
Licensed Clinical Social Worker provides psychotherapy and counseling services for couples and individuals in the East Bay Area.


Join the Revolution
Kiva - loans that change lives