meta user
network profile
| bio | website | |
|---|---|---|
| location | Brooklyn, NY | |
| age | 31 | |
| visits | member for | 2 years, 1 month |
| seen | 4 hours ago | |
| stats | profile views | 295 |
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.
Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.
Mostly program/script in python, django, and jquery these days doing mostly web apps.
Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.
Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).
|
Mar 10 |
answered | Simple solution to XSS |
|
Mar 10 |
answered | Many-time pad on image data, how to proceed? |
|
Mar 10 |
revised |
DOM Based XSS attacks: what is the most dangerous example? deleted 1 characters in body |
|
Mar 10 |
revised |
DOM Based XSS attacks: what is the most dangerous example? deleted 1 characters in body |
|
Mar 10 |
revised |
DOM Based XSS attacks: what is the most dangerous example? added 678 characters in body |
|
Mar 10 |
answered | DOM Based XSS attacks: what is the most dangerous example? |
|
Mar 10 |
reviewed | Approve suggested edit on “pagesinxt.com” links in the sourcecode, am I being hacked? |
|
Mar 9 |
reviewed | Approve suggested edit on Is $_SERVER[ ] a safe source of data in PHP? |
|
Mar 9 |
reviewed | Approve suggested edit on What security requirements are a defacto standard in the Financial Industry? |
|
Mar 8 |
reviewed | Close Best strategy using encryption to ensure that only authorized application can access smartcard? |
|
Mar 8 |
reviewed | Close Why doesn't Advanced IP Scanner show machine name? |
|
Mar 8 |
reviewed | Approve suggested edit on How do I get my Encryption Certificate back? |
|
Mar 8 |
reviewed | Approve suggested edit on Use Token in Windows Server 2008 AD RMS |
|
Mar 7 |
answered | At what point does something count as 'security through obscurity'? |
|
Mar 7 |
revised |
How risky is it not to install ssl? added 191 characters in body |
|
Mar 7 |
answered | How risky is it not to install ssl? |
|
Mar 5 |
answered | Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field This makes no sense. The problem is that the user accidentally typed in password in the username field. It doesn't matter if its an HTTP POST or an AJAX XMLHttpRequest. If the password was in the username field, you don't want it sent over the network (unencrypted). Also, its generally a bad idea to process non-existent usernames differently than an incorrect password as it allows attackers to find a valid accounts. (Especially bad if you don't require CAPTCHA or similar allowing attackers to easily collect usernames). |
|
Mar 2 |
comment |
Is it possible to steal money directly from the systems of a big bank? As an aside: floating point numbers should never be used to represent money. Money in real life is broken down into decimals (in base 10) that can't be represented exactly in base 2. This introduces rounding errors appear into your calculations that you don't want to deal with. You should do exact math using say a Decimal object or using integers (representing pennies) to remove this uncertainty. |
|
Feb 28 |
comment |
Testing for HTTP TRACE method If they aren't using HTTPS, you can replace your step 1 ( openssl s_client -connect example.com:443) with telnet example.com 80. |
