22,123 reputation
338102
bio website
location Brooklyn, NY
age 33
visits member for 3 years, 11 months
seen 9 hours ago
Good Morning how are you, I'm dr jimbob
I'm interested in things.
I'm not a real dr,
But I am a real jim bob.

Have a PhD in Experimental High-Energy Physics, but left academia in mid-2010 to program professionally.

Mostly program/script in python, django, and jquery these days doing mostly web apps.

Also have experience programming in C, C++, java, haskell, php, and (bash) shell more in the past.

Linux as primary OS since 1999, ubuntu user since 2005 (Hoary).


Aug
2
comment what type of database server is used by fb?
@hellruler - SQL injection by definition requires an SQL database (e.g., oracle, postgresql, sqlite, mysql, MSSQL, etc) and a badly designed application. (It doesn't require the microsoft product with the dumb name of "SQL Server", but better known as MSSQL.) Granted SQL injection is only one type of injection attack; you can have injection attacks on NoSQL databases, code injection in bash/shell/php scripts, etc. Anytime a statement is eval (or equivalent) that contains untrusted user input you are vulnerable to an injection attack. It's only SQL injection if its an SQL statement.
Aug
1
comment What can a hacker do with a card number without CVV?
It's not exactly a duplicate, but the answer there should clear up the misconception that a credit card # alone is worthless.
Jul
31
comment Can ISP use MITM attack to “break” encrypted traffic?
At the exit node, tor traffic is very susceptible to eavesdropping. See: security.stackexchange.com/questions/34804/… and security.stackexchange.com/questions/31589/…
Jul
31
answered Can ISP use MITM attack to “break” encrypted traffic?
Jul
25
comment How easy is it to crack this encryption algorithm?
@Gilles - Thanks for the suggestion!
Jul
24
revised How easy is it to crack this encryption algorithm?
added 654 characters in body
Jul
24
answered How easy is it to crack this encryption algorithm?
Jul
24
comment Can I test/determine all decryption types on an unkown filetype. I do have the password
This question is fundamentally unanswerable. A well-encrypted file is indistinguishable from random data without knowledge of the key or existing meta-data (which there appears to be none) that explains how it was encrypted.
Jul
24
revised Can I test/determine all decryption types on an unkown filetype. I do have the password
added 478 characters in body
Jul
24
answered Can I test/determine all decryption types on an unkown filetype. I do have the password
Jul
24
awarded  Guru
Jul
21
answered Is encrypting and subsequently sending a known clearext string after a Diffie-Hellman bad design?
Jul
18
revised Properties of AES Encryption
added 1086 characters in body
Jul
18
revised Properties of AES Encryption
exponents from ^ to <sup>
Jul
18
answered Properties of AES Encryption
Jul
11
comment Any example where client certification is required?
@tangrs - Yes. If you go to startssl.com and try to create a free SSL certificate (e.g., for your website), they'll require you to first generate a SSL certificate for client authentication (to login) with startssl.com instead of a password.
Jul
11
reviewed Close Can a virus on the host affect the VM guest
Jul
10
awarded  Fanatic
Jul
2
awarded  Curious
Jun
30
comment Books to start the study of TCP/IP
I wouldn't dive deep into TCP/IP until you've studied survey-level networking. I highly recommend the free coursera networking course and liked Kurose/Ross - Computer Networking (under $20 on amazon if you get used copy of the 5th edition (2009)). Also, if you are mostly interested in security stuff, but find networking basics a bit dry at first, then maybe look at the Web Application Hacker's Handbook for fun, quickly-applicable intro to security in web apps that often introduces some basics (mostly application layer).