22,644 reputation
340105
bio website
location Brooklyn, NY
age 34
visits member for 4 years, 1 month
seen 10 hours ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Jun
30
revised is it easier to eavesdrop on ethernet connection rather than wifi?
Crossed out admitted mistaken idea in case someone doesn't read comments.
Jun
30
comment is it easier to eavesdrop on ethernet connection rather than wifi?
This is simply false. WPA and WPA2 (and even WEP, though WEP is broken and should not be used) encrypts the radio transmissions between your laptop/mobile device and the wifi access point.
Jun
24
awarded  Nice Answer
Jun
19
awarded  Notable Question
Jun
5
revised Can a wifi provider decrypt HTTPS usind MITM without users noticing?
added 8 characters in body
Jun
5
answered Can a wifi provider decrypt HTTPS usind MITM without users noticing?
Jun
2
awarded  Nice Answer
May
27
comment How to hack into a remote mysql database?
Yes. The MITM tricks the client into believing the server doesn't support SSL. You fix this by upgrading the clients to 5.7.3 or greater, or don't talk to your database over untrusted networks (e.g., use it only as a local application, or a small private network, or over a secure VPN).
May
22
awarded  Yearling
May
19
answered How to hack into a remote mysql database?
May
17
awarded  Nice Answer
May
14
comment Why will Google no longer allow me to end or begin passwords with a space?
My point was from a security perspective, its safer to tell you after inputting a password in a form that will be modified prior to hashing, that "we don't allow passwords greater than 8 characters/with this special character/with unicode characters/with starting/trailing whitespace" while you are setting your password.
May
14
answered Why will Google no longer allow me to end or begin passwords with a space?
Apr
18
comment Do search engines give searcher's IP address to sites that come up in search?
@tim - if the site owner uses google analytics, you get the searched keywords from looking at the analytics. (You won't get them for each individual user straight from google; but if you say cross reference info from the time, user agent, etc with keyword searches you can match them up in your logs.
Apr
14
awarded  Good Question
Apr
3
comment Would the authorities in my college be able to see what websites I accessed through tunneling(SSH)?
ssh -D supports both SOCKS4/SOCKS5 (and man ssh explicitly says it supports SOCKS4 & 5 under the -D option in OpenSSH v6.2 or v6.6). SOCKS5 support has been in OpenSSH since version 3.7 (released Sept 2003). You still have to make sure that you are using SOCKS5 not SOCKS4 (when you configure your browser to connect to the proxy), and that DNS is being done through the tunnel, e.g., in firefox you'll have to enable network.proxy.socks_remote_dns in about:config.
Mar
12
comment Why for some SSL websites browsers show extra info, while for others dont
The benefit of EV certificates is they do fact checking. So if an attacker manages to get a domain like thepaypal.website, the attacker could get regular class-1 SSL certificates for it, but not EV ones as they would not be able to prove they are legal identity paypal.
Mar
12
comment Why for some SSL websites browsers show extra info, while for others dont
-1 - This is wrong. Self-signed certificates will present a scary dialog "Don't trust this connection". The no green box is for regular CA signed class-1 certificates. This validates that the owner of the certificate also controls the domain. (E.g., you bought example.com and can receive emails at admin@example.com). The certificates with the large green boxes are the extended validation certificates which verify that a domain belongs to a real life organization (and the green box displays what organization).
Mar
11
answered Temporarily save failed logins password hashes for using against brute force attack
Feb
13
awarded  Nice Answer