Re: ENCODE() and DECODE()

2007-03-13 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Googling for
ASP AES
I found several promising results.


- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)
- - Original Message -
From: Neil Tompkins [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: mysql@lists.mysql.com
Sent: Tuesday, March 13, 2007 3:45 AM
Subject: Re: ENCODE() and DECODE()



I'm using ASP.  Do you know any resources that I could use ?




From: Wm Mussatto [EMAIL PROTECTED]
To: Neil Tompkins [EMAIL PROTECTED]
Subject: Re: ENCODE() and DECODE()
Date: Mon, 12 Mar 2007 15:27:26 -0700 (PDT)

On Mon, March 12, 2007 15:05, Neil Tompkins said:
 Do you think these functions would be ideal for my requirements in
 terms
 of
 encrypting credit card numbers when stored in a database ?

Actually, no.  If you are working a language like perl look at encoding
the information and then storing it. I think encode and decode are too
weak.

in perl I use use Crypt::CBC; and then picked a strong cypher. If you use
perl, please go to cpan.org for the details.  BTW the reason for using
blob type it to avoid truncation. After its encoded removing trailing
spaces is a BAD THING.

Bill


From: Wm Mussatto [EMAIL PROTECTED]
To: Neil Tompkins [EMAIL PROTECTED]
CC: mysql@lists.mysql.com
Subject: Re: ENCODE() and DECODE()
Date: Mon, 12 Mar 2007 13:54:41 -0700 (PDT)

On Mon, March 12, 2007 13:04, Neil Tompkins said:
  Sorry Bill, I'm unsure what you mean by bin
My error, too early in the morning here 'blob'
 
 From: William R. Mussatto [EMAIL PROTECTED]
 To: mysql@lists.mysql.com
 Subject: Re: ENCODE() and DECODE()
 Date: Mon, 12 Mar 2007 10:31:53 -0700 (PDT)
 
 On Mon, March 12, 2007 8:04, Neil Tompkins said:
   I've been researching the best method to store credit card
   numbers
 in
  a
   database which are saved encrypted.  My version of mysql is 3.23
 therefore
   I
   think the only function I could use is
  
   ENCODE() and DECODE().
  
   I've tried these functions and they appear to work as I want.
I've
 a
   couple
   of questions though, can I use varchar when saving the data and
are
 these
   functions suitable for my requirements ?
  
   Thanks,
   Neil
 use 'Bin' versions of fields since the encoded data may be binary.
 
 Bill
 
 
 --
 MySQL General Mailing List
 For list archives: http://lists.mysql.com/mysql
 To unsubscribe:
 http://lists.mysql.com/[EMAIL PROTECTED]
 
 
  _
  Txt a lot? Get Messenger FREE on your mobile.
  https://livemessenger.mobile.uk.msn.com/
 
 



 _
 Solve the Conspiracy and win fantastic prizes.
 http://www.theconspiracygame.co.uk/


 --
 MySQL General Mailing List
 For list archives: http://lists.mysql.com/mysql
 To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]






_
Get Hotmail, News, Sport and Entertainment from MSN on your mobile.
http://www.msn.txt4content.com/


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFF9rLrI7J99hVZuJcRA9CdAKCBhJ+do8Y3ouGozoBYdTnNR/py+QCgvYTs
YCKVLb0a7gkZPbNy73WtH2k=
=O8xx
-END PGP SIGNATURE-

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: MD5()

2007-03-10 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Before you implement anything, I would do a lot of research about
encryption.  No offense, but from your question, it is clear that you know
next to nothing about encryption.  That's fine.  A few years ago, I was the
exact same way.  However, encryption is somewhat complex, so if you're going
to do it, you should do it right.  In my opinion, poorly implemented
encryption can be worse than no encryption at all.

You should also think carefully before storing customers credit card
numbers.  You should seriously consider whether or not it is really
necessary to do so.  If it is simply for the purpose of rebilling, a lot of
credit card processing API's will handle this for you.

Finally, what another poster said is right on the money.  If you are in a
shared hosting environment, do not even think about handling customers
credit cards.  There are too many ways security can be compromised on such
systems.  If that is in fact the case, I would suggest you outsource the
customer billing.  Remember also that security breaches of this type can
seriously damage the reputation of any organization.

Aaron


- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)
- - Original Message -
From: Neil Tompkins [EMAIL PROTECTED]
To: mysql@lists.mysql.com
Sent: Saturday, March 10, 2007 4:17 AM
Subject: MD5()



I'm looking to use MD5() to encrypt credit card numbers.  How do I
unencrypt this when reading the value ?

Thanks,
Neil

_
Get Hotmail, News, Sport and Entertainment from MSN on your mobile.
http://www.msn.txt4content.com/


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]



-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFF8tlUI7J99hVZuJcRA+kXAKDEB6EU0QzTrTZu72wPUe+43Pi2TwCeKTFw
UDnwBp4Wwt+/n4YAn6SPfl4=
=HRjm
-END PGP SIGNATURE-

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: [inbox] Re: Breaking Up Tables

2007-03-01 Thread Aaron Cannon
It's nothing to do with MySQL.  split is a command that you can find under 
many flavors of Linux, and Linux-like OSes.


At the shell prompt, type:
man split
to see the documentation.

However, if you have bzip2 on your system, I would recommend running that 
first, in order to compress it as much as possible.


So, to summarize, this is would I would do:

1. run mysqldump to dump my data and save it to a file, for instance, db.sql

2. type:
bzip -9 db.sql
This will give you a file named db.sql.bz2

3. If db.sql.bz2 is still too large, I would run split:
split bla bla bla
(Replace bla bla bla with the options for split.  I never use it, so I don't 
know what they are.)


This will give you a few smaller files named db.sql.bz2.1 db.sql.bz2.2 ETC.

4. Transfer these files to my other machine.

5. reassemble the smaller files into one big file:
cat db.sql.bz2.1 db.sql.bz2.2 db.sql.bz2.3 db.sql.bz2 \
db.sql.bz2

6. decompress the db.sql.bz2 file
bunzip2 db.sql.bz2

7. import db.sql into wherever.



Hope this helps.

Aaron


--
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail 
address.)
- Original Message - 
From: [EMAIL PROTECTED]

To: mysql@lists.mysql.com
Sent: Thursday, March 01, 2007 9:15 AM
Subject: Re: [inbox] Re: Breaking Up Tables



-Original Message-
From: [EMAIL PROTECTED]
To: mysql@lists.mysql.com
Sent: Thu, 1 Mar 2007 10:35 AM
Subject: Re: [inbox] Re: Breaking Up Tables


if you have shell access on the server, why not just use
split? Create your big dump file, split it into smaller
chunks and use cat on the other end to reassemble the pieces.
if you don't, just have someone at your host provider who does
do it.


Sounds perfect! I just spent 10 minutes trying to research splitting in 
the MySQL Ref. Man. and couldn't find anything. Can you point me, or give 
me a sample command? Also to re-stitch it together on the other end?

TIA,
Tony

AOL now offers free email to everyone.  Find out more about what's free 
from AOL at AOL.com.





--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: MySQL Daylight Savings Time Patch

2007-02-21 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If it's any consolation, I got the exact same warnings.  However, I don't
know if it's normal either.


- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)
- - Original Message -
From: Jerry Schwartz [EMAIL PROTECTED]
To: 'Paul DuBois' [EMAIL PROTECTED]; 'Sun, Jennifer'
[EMAIL PROTECTED]; 'Dan Buettner' [EMAIL PROTECTED];
'Chris White' [EMAIL PROTECTED]
Cc: mysql@lists.mysql.com
Sent: Wednesday, February 21, 2007 8:45 AM
Subject: RE: MySQL Daylight Savings Time Patch



I just ran mysql_tzinfo_to_sql on a CentOS (Linux) system, and it
complained
about the various Riyadh time zones:

Warning: Unable to load '/usr/share/zoneinfo/right/Mideast/Riyadh87' as
time
zone. Skipping it.
Warning: Unable to load '/usr/share/zoneinfo/right/Mideast/Riyadh88' as
time
zone. Skipping it.
Warning: Unable to load '/usr/share/zoneinfo/right/Mideast/Riyadh89' as
time
zone. Skipping it.

etc.

Any idea whether or not this is normal?

Regards,

Jerry Schwartz
Global Information Incorporated
195 Farmington Ave.
Farmington, CT 06032

860.674.8796 / FAX: 860.674.8341




--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]





-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFF3GZ+I7J99hVZuJcRAvUUAJ4xHKNQtxYBSrpDqadTzPdBx3uQIwCfRZkL
uQ5ODv/bD5SN5CW9JpYIlxQ=
=z+FD
-END PGP SIGNATURE-


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: 5.1.14-beta with ssl build failure

2007-01-05 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

It is unfortunate that mysql does not offer a binary version with ssl
support for Linux.  Does anyone know why?  It can't be for export reasons,
as they do offer a windows version with SSL support.

Aaron Cannon



- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFFnniYI7J99hVZuJcRApGtAKD73Z3nSn4viL5mulFj0ijNjZWaOgCgrN2w
JN/foKnc4hmXwzoaiupjbr4=
=n7j+
-END PGP SIGNATURE-


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



Re: Data types and space needs

2007-01-05 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Actually, I think he was asking if the sized used by the storage engine
would change if you used for example int(2) as apposed to int(10).  My guess
is it would not, but that's just a guess.

Aaron Cannon


- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)
- - Original Message -
From: Dan Buettner [EMAIL PROTECTED]
To: Olaf Stein [EMAIL PROTECTED]
Cc: MySql mysql@lists.mysql.com
Sent: Friday, January 05, 2007 8:45 AM
Subject: Re: Data types and space needs



Olaf, not a silly question at all.  You can indeed save space by using
different forms of integer.

See
http://dev.mysql.com/doc/refman/5.0/en/numeric-type-overview.html
and
http://dev.mysql.com/doc/refman/5.0/en/storage-requirements.html

From that second page:

Storage Requirements for Numeric Types

Data Type Storage Required
TINYINT 1 byte
SMALLINT 2 bytes
MEDIUMINT 3 bytes
INT, INTEGER 4 bytes
BIGINT 8 bytes

You may also be able to use UNSIGNED to extend the range of a column,
if you don't need to store negative values.

HTH,
Dan

On 1/5/07, Olaf Stein [EMAIL PROTECTED] wrote:

Hi All,

I have somewhat of a silly question.
If I define a column as int it needs 4 bytes.
Do I gain anything space wise if I restrict the length to e.g. 10,
int(10),
or is this only a logical restriction?


Thanks
Olaf



--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]





-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFFnnnGI7J99hVZuJcRAkstAJsEw8S1ZxnEpL+oXvpDsTfKx3C34QCgpnNT
hd379sQHorwV3eV9NcYeq0E=
=WAXX
-END PGP SIGNATURE-


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]



select statement question

2007-01-03 Thread Aaron Cannon

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi all.  I hope this is the right place to ask this.

I have two tables, A and B.  Each of these tables has a column with
integers.  The column in table A is C and the one in B is D.

I need a select statement that will return all records whose C value is not
in any row in D.

for example:
C =
1
2
3
4
5
6
7
8
11

D =
2
4
6
8
10

and the statement would return:
1
3
5
7
11

Probably an easy question for those of you more experienced but I have no
clew.

Thanks in advance.

Sincerely
Aaron Cannon


- --
Skype: cannona
MSN/Windows Messenger: [EMAIL PROTECTED] (don't send email to the hotmail
address.)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (MingW32) - GPGrelay v0.959
Comment: Key available from all major key servers.

iD8DBQFFnBbLI7J99hVZuJcRAiF3AJ4mR4UjLa0sG+hIDbErj7LvuzfU4wCggEDh
DtnfmVsHL84me4qVw/mA4s8=
=l2gE
-END PGP SIGNATURE-


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]