d2jsp
Log InRegister
d2jsp Forums > Off-Topic > Computers & IT > Programming & Development > 7 Years Programming Now > A Google Story
Prev12348Next
Add Reply New Topic New Poll
Member
Posts: 3,197
Joined: May 4 2013
Gold: 1,457.00
May 17 2017 12:02pm
Quote (AbDuCt @ May 17 2017 09:38am)
Here's a simple question then since you like working SQL. Hopefully you know of the SQL attacks that can be used against a web app as well.

How do you calculate the maximum number of bits you can transfer per blind SQL request based on the number of columns in the table and how do you mathematically transfer data out of the table at that bit rate.


You use prepared statements or ORM
Member
Posts: 13,425
Joined: Sep 29 2007
Gold: 0.00
Warn: 20%
May 17 2017 12:28pm
Quote (nuvo @ May 17 2017 02:02pm)
You use prepared statements or ORM


You have no idea what I asked in the question. That much is apparent.
Member
Posts: 3,197
Joined: May 4 2013
Gold: 1,457.00
May 17 2017 01:19pm
Quote (AbDuCt @ May 17 2017 11:28am)
You have no idea what I asked in the question. That much is apparent.


Oh I know what you mean. But I answered with the logical solution that removes the problem entirely.

It's as if you asked car manufacturer how much does a bucket to hold horse poop weight. The answer is: we use engines, not horses anymore. No poop problem.

Unless you want to be on attackers side? I don't think that's what he's interested in.

This post was edited by nuvo on May 17 2017 01:25pm
Member
Posts: 5,167
Joined: Nov 23 2006
Gold: 11.01
May 17 2017 01:35pm
Quote (nuvo @ May 16 2017 01:02pm)
That's the difference between software architects and code monkeys

signed, another code monkey xd


To be fair you hardly have to worry about algorithm design in MOST companies. Unless you're at a company like Google of course...

I've done work in the insurance and real-estate industries and still haven't had anything so complex that I've needed to worry about time complexity of a BST or anything of the sort.

Granted, at a massive scale it can become a concern but most people aren't worrying about tens of millions of bytes of data.
Member
Posts: 13,425
Joined: Sep 29 2007
Gold: 0.00
Warn: 20%
May 17 2017 02:49pm
Quote (nuvo @ May 17 2017 03:19pm)
Oh I know what you mean. But I answered with the logical solution that removes the problem entirely.

It's as if you asked car manufacturer how much does a bucket to hold horse poop weight. The answer is: we use engines, not horses anymore. No poop problem.

Unless you want to be on attackers side? I don't think that's what he's interested in.


The problem was the algorithm for the attack, not the attack itself.

You still have no idea.
Member
Posts: 3,197
Joined: May 4 2013
Gold: 1,457.00
May 17 2017 02:57pm
Okay then, enlighten me. I understand the attack and understand the math beyond it, which isn't exactly rocket science. What am I missing? Maybe I did misread your post.

This post was edited by nuvo on May 17 2017 02:58pm
Member
Posts: 13,425
Joined: Sep 29 2007
Gold: 0.00
Warn: 20%
May 17 2017 03:11pm
Quote (nuvo @ May 17 2017 04:57pm)
Okay then, enlighten me. I understand the attack and understand the math beyond it, which isn't exactly rocket science. What am I missing? Maybe I did misread your post.


I can't state it any simpler. You obviously do not know the attack nor the match behind it.

Quote
How do you calculate the maximum number of bits you can transfer per blind SQL request based on the number of columns in the table and how do you mathematically transfer data out of the table at that bit rate.
Member
Posts: 20,790
Joined: Feb 8 2012
Gold: 1,630.69
May 17 2017 04:54pm
Came into this topic expecting a success story of landing a good position at Google after 7 years of passionate programming, and it's just a script kiddie who became the head of IT at a random place.
Let's assume you are some genius, and you wouldn't learn a thing during college/university. Even in that case, it's still a worthy investion, as you would earn significantly more than you are now.

By the way other search engines can be used for that purpose just as good, if not better than Google, I have absolutely no clue why would you want to thank Google in particular.

Member
Posts: 3,197
Joined: May 4 2013
Gold: 1,457.00
May 17 2017 05:02pm
Quote (AbDuCt @ May 17 2017 02:11pm)
I can't state it any simpler. You obviously do not know the attack nor the match behind it.


The attack is very well described out there and the math is also explained. You can just take it and read it, or even apply directly. You make it seem like it's something super cryptic and hard when it isn't. So I am still confused on what is the problem here? Do you want us to be impressed you know about it? It's literally 10 second google query and clicking first result, exactly what OP and millions of others do every day

This post was edited by nuvo on May 17 2017 05:05pm
Member
Posts: 17,090
Joined: Nov 22 2008
Gold: 169.00
May 17 2017 05:15pm
The best thing you could learn in university is self-discipline. Education and knowledge is the bonus that you get from it.
Everyone on this planet can learn how to program at this moment, it is just not something special anymore, dont flatter yourself.

Usually egoistic kids will blame school, system, goverment and other source of their failure, but they will never put the blame on themself for playing dota or wow for 8 hours a day for example.

Just grow up and stop shitting on others people jobs and education. Money is the irrelevant thing to most of the intelligent people, and nobody will ever be impressed by your salary.
Go Back To Programming & Development Topic List
Prev12348Next
Add Reply New Topic New Poll