21,338 reputation
33699
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 6 months
seen 1 hour ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Aug
3
revised Ip4v Rainbow Table
added 142 characters in body
Aug
3
revised Ip4v Rainbow Table
added 34 characters in body
Aug
3
comment Ip4v Rainbow Table
@Mark - In this case, it is in the common dotted decimal form of 192.168.0.1.
Aug
3
answered Ip4v Rainbow Table
Aug
2
comment what type of database server is used by fb?
possible duplicate of How can I explain SQL injection without technical jargon?
Aug
2
comment what type of database server is used by fb?
@hellruler - SQL injection by definition requires an SQL database (e.g., oracle, postgresql, sqlite, mysql, MSSQL, etc) and a badly designed application. (It doesn't require the microsoft product with the dumb name of "SQL Server", but better known as MSSQL.) Granted SQL injection is only one type of injection attack; you can have injection attacks on NoSQL databases, code injection in bash/shell/php scripts, etc. Anytime a statement is eval (or equivalent) that contains untrusted user input you are vulnerable to an injection attack. It's only SQL injection if its an SQL statement.
Aug
1
comment What can a hacker do with a card number without CVV?
It's not exactly a duplicate, but the answer there should clear up the misconception that a credit card # alone is worthless.
Jul
31
comment Can ISP use MITM attack to “break” encrypted traffic?
At the exit node, tor traffic is very susceptible to eavesdropping. See: security.stackexchange.com/questions/34804/… and security.stackexchange.com/questions/31589/…
Jul
31
answered Can ISP use MITM attack to “break” encrypted traffic?
Jul
25
comment How easy is it to crack this encryption algorithm?
@Gilles - Thanks for the suggestion!
Jul
24
revised How easy is it to crack this encryption algorithm?
added 654 characters in body
Jul
24
answered How easy is it to crack this encryption algorithm?
Jul
24
comment Can I test/determine all decryption types on an unkown filetype. I do have the password
This question is fundamentally unanswerable. A well-encrypted file is indistinguishable from random data without knowledge of the key or existing meta-data (which there appears to be none) that explains how it was encrypted.
Jul
24
revised Can I test/determine all decryption types on an unkown filetype. I do have the password
added 478 characters in body
Jul
24
answered Can I test/determine all decryption types on an unkown filetype. I do have the password
Jul
24
awarded  Guru
Jul
22
comment Does the SSL termination happen with the ISP or a mobile service provider?
DNS (and ARP) spoofing has nothing to do with SSL or encryption. Yes, it's how you would do a MitM attack on HTTP (no encryption) or with HTTPS if the attacker has gotten their hands on a private SSL key for the faked domain (either through trickery, getting people to trust a bad certificate, actually stealing a certificate, or compromising a CA into signing fake certificates).
Jul
21
answered Is encrypting and subsequently sending a known clearext string after a Diffie-Hellman bad design?
Jul
18
revised Properties of AES Encryption
added 1086 characters in body
Jul
18
revised Properties of AES Encryption
exponents from ^ to <sup>