William Ahern

5432 Geary Blvd. #163 San Francisco CA 94121

415-608-5833 william@25thandClement.com http://www.25thandClement.com/~william/projects/

Sendmail PostgreSQL Apache MySQL UW-IMAP Samba BIND (v4, v8, v9) GNU/Linux OpenBSD C Perl Lua Java M4 Sed Awk ANSI SQL Unix Shell (Korn, Z-Shell, Bash) BSD Sockets POSIX Threading, IPC SysV IPC OpenSSL GNU Autotools CVS, SVN C Standards/Libraries (C89/90, C99, POSIX/SUSv3, SysV, BSD, GNU) XSL PHP ColdFusion JavaScript XML RDF 1.0 RSS 1.0/2.0 XHTML 1.0/2.0 CSS 1.0/2.0 IPv6 IPSec HTTP SSL/TLS XMPP SMTP LDAP X.509 Certificate Management P2P (Distributed vs. Federated; Distributed hash tables) Principles of Cryptography (RSA vs. DH; Secrecy vs. Authentication vs. Authorization) mod_auth_bsd William Ahern Apache 1.x authentication module using BSD Authentication framework. http://www.25thandClement.com/~william/projects/bsdauth.html Air Control (airctl) William Ahern Unix command-line utility to control Apple's Airport base station. The Airport base station uses an SNMP-like control format over UDP. http://www.25thandClement.com/~william/projects/airctl.html AnonNet William Ahern A fully distributed, P2P anonymizing network. Awarded grant from the Linux Fund. http://www.authnet.org/anonnet/ PostgreSQL PostgreSQL Project Contributed OpenBSD getpeereid(2) support for passwordless authentication over Unix domain sockets. http://www.postgresql.org/ GNU ADNS Ian Jackson Contributed DNS SRV (RFC 2782) record query support to the GNU ADNS asynchronous DNS resolver library. http://www.chiark.greenend.org.uk/~ian/adns/ c-ares MIT, Daniel Stenberg, et al Contributed bug patches, feature enhancements to this asynchronous DNS resolver. http://daniel.haxx.se/projects/c-ares/ OpenSSH Damien Miller, et al Implemented Unix domain socket forwarding for OpenSSH. Required extensive changes at all levels of the code, including SECSH protocol handling. http://25thandClement.com/~william/projects/streamlocal.html Senior Engineer Barracuda Networks March 2004 Senior software engineer and architect. Responsible for design, construction and maintenance of various systems level components. Microsoft Exchange Accelerator: Links Barracuda Spam Firewall with Active Directory/LDAP organization database with lightweight, event based, caching interconnect daemon. Seamlessly supports both LDAP and SMTP recipient verification. Barracuda::Bayes: Constructed Bayesian statistical analysis component including a custom, fault-tolerant and self-healing embedded database for token storage, international script/character set (I18N) word boundary parsing, and Markov chaining. Barracuda SMTP Daemon: Personally constructing lightweight, high performance, filtering, event based SMTP (E-mail) server. Supports single-pass streaming filtering, encompassing all of RFC821/2821 communication, RFC822/2822 parsing, MIME decomposition, Unicodification and attachment decoding. Filtering modules can be written in C, Perl or Lua as loadable modules. Filtering policy implemented through execution of a declarative policy script. Automated code generation produces over 80% of the intermediate C source code, reducing bugs, development time, and increasing the the ratio of source which can be statically analyzed. Support Infrastructure: Building and maintaining a highly secure environment through which technical support personnel remotely access tens of thousands of Barracuda appliances around the world. This involves constructing a robust, multi-layered authentication and authorization infrastructure within Barracuda's network and accompanying support included within each appliance. Spearheaded refactoring of build infrastructure towards a non-recursive Make paradigm. Allows for defining a complete directed acyclic graph of project dependencies across the entire source tree (comprising millions of lines of code). This provides invaluable insight for both engineering and product management. Contracted Consultant JINSA August 2002 December 2003 Changes and additions to the JINSA Online content management system. Technical consultation as issues arose. Created new JINSA store. All data kept in central XML repository, using XSLT templates for presentation. Real-time USPS shipping rate quotes using their XML web services interface. Related article document-vectoring engine. Worked closely with the original author of the Text::Document Perl module to increase the document parsing and scoring speed. Batch processing of JINSA's document set went from hours to minutes. Integrated site administrator authentication with the underlying system authentication framework. The project mostly consisted of writing mod_auth_bsd, which links Apache's HTTP Basic Authentication functionality with the BSD Authentication framework (similar to PAM) employed in OpenBSD and BSDi Unix. Refactored various backend elements to generate XML for metadata storage and content presentation. Rewrote custom PHP XML processors to utilize XSLT templates. Home page, Recent news and side bars generated from XML using XSLT. These features tied into the custom CMS, and so re-transformed with change or addition of new content, not simply on each page view. Automatic RSS feed generation from XML site content using XSLT. Automatic weekly e-mail digests advertising new site content to members. Associate Consultant AG Consulting October 2000 June 2002 Worked for the e-Solutions group within AG. We developed self-service web-based solutions primarily atop clients' ADP Enterprise/Horizon and PeopleSoft HRMS/ERP systems. Web based self service timesheet application integrated with their ADP Enterprise HRMS. Utilized Coldfusion and JavaScript with an MS SQL database. The front-end to this application heavily relied on DHTML to reduce client-server round trips, as the end-users were on 14.4- and 28.8- baud modems (and IIS did not support on-the-fly HTTP compression). Bandwidth could be maximally used for sending data and not presentation code. This methodology is now commonly called AJAX, following the advent of Google Maps. Constructed web self-service interface into ADP EV2 installation using ADP's Java WYSIWYG EBuilder for the EV2 Java servlet web component. Created a portal for AG Consulting project managers and executives to track project revenues and account receivables. Data fed from ADP Corporate headquarters' Oracle Projects system. Portal centered around Crystal Reports presentations, with several batch processes run on MS SQL and Oracle. Published in an industry magazine with an article describing issues around Internet security and single-signon (SSO). Described the relationships between privacy, authentication and authorization and how those properties are effected across different web service schemes. Software Engineer Mailshell.com Online e-mail service which provides a web based client mail interface to filter out SPAM. The service linked to existing POP3 or IMAP accounts, or used pseudo-anonymous proxy e-mail addresses managed by Mailshell. May 2000 October 2000 Developed web-proxy interface which allowed users to easily utilize Mailshell's anti-spam services when browsing. PHP, Perl. Developed an indexing search engine for the mailing-list directory. PHP, Perl. IMAP client-interface tied into the Mailshell anti-spam facilities. Manager of Information Systems JINSA March 1998 May 2000 Developed JINSA Online (www.jinsa.org), including custom session support (pre-PHP Sessions), integration of seamless real-time credit card transactions, and web based document/article administration. Home page and Recent News content kept in XML, transformed using custom PHP processors (pre-XSL). Utilized PHP and Perl on top of Linux, Apache and MySQL solutions. Heavy integration of JavaScript GUI tool-kit (DynAPI2) into site navigation menus. Mailing list management, web site traffic analysis, and on-line multimedia content distribution. Multimedia management included porting of Apple's Quicktime Streaming Server to Linux servers. Developed service solutions and custom applications for staff members (i.e. Web Calendar, Database conversions). WWW, File and Database server (MS Access, Sybase ASE) maintenance. Firewall and router configuration. Office PC (Win9x/NT/Mac) and LAN maintenance. Helpdesk Support The George Washington University September 1997 August 1998 Assisted students with computer laboratory issues. Handled university student computing services accounts; i.e. Unix account registration, e-mail issues, etc. Discovered intruder on main student unix server (GWIS2), alerting administrators and leading to a complete overhaul of security management within GW's Information Services group. Bachelor of Arts International Affairs The George Washington University August 1997 May 2000 Conference of degree pending completion of foreign language proficiency examination. The first year of college was attended full-time at the University of West Florida, coterminus with highschool (1996-1997).