databases – Page 10 – WindowsTechs.com

How can a user update the password database without having read or write permissions to the password database file itself? [closed]

Posted on November 18, 2021 by kristina

How can a user update the password database without having read or write permissions to the password database file itself? And why would that be dangerous?
It’s a question in my OS class. We are learning about security, authentication, sal… Continue reading How can a user update the password database without having read or write permissions to the password database file itself? [closed]→

How to be sure there are only encrypted data on my backend

Posted on November 17, 2021 by Estéban Ristich

I am coding an online password manager as part of my apprenticeship.
I have already coded the full backend to synchronize the encrypted data and a frontend that encrypts and decrypts data with AES. So far, no secrets are shared with the ba… Continue reading How to be sure there are only encrypted data on my backend→

How to control authorized access to specific data for specific users

Posted on November 11, 2021 by Aplex

I am building a web application that involves a login system. Once a user has logged in and is authenticated they should have the ability to access data from a database. This is however where I get a bit confused. How would I go about limi… Continue reading How to control authorized access to specific data for specific users→

Database Security for Public Databases

Posted on November 6, 2021 by cyw

I recently moved some of my projects over a to serverless platform. I immediately noticed a few issues though. The biggest being database security.
Prior to this I had been hosting my sites and database on a single server with the database… Continue reading Database Security for Public Databases→

Getting Smaller Output From Public Key Cryptography In PHP

Posted on October 14, 2021 by azoundria

I have a website in a shared hosting environment, and I’m also planning to back up in multiple locations. All of that introduces vulnerability where the data could get intercepted, stolen, or misused by authorized parties. The data isn’t a… Continue reading Getting Smaller Output From Public Key Cryptography In PHP→

Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys

Posted on October 14, 2021 by azoundria

In cryptography, generally we have two ways of handling sensitive information.
We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we can know if we found the right password,… Continue reading Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys→

What’s The Best PHP Encryption For Email Addresses?

Posted on October 13, 2021 by azoundria

I’m storing a list of email addresses and other not personally identifiable information for a mailing list in a database. Since it’s for a project related to cryptocurrency, I believe that the information could be a target for future attac… Continue reading What’s The Best PHP Encryption For Email Addresses?→

Is there such a thing as a concise, clean, serious source to learn about "security leaks" without all the stupid BS? [closed]

Posted on October 10, 2021 by Kabir

It appears as if there has been a Twitch compromise. Somebody hinted that private messages have been leaked out. This makes me paranoid since I’ve had quite a few "private" conversations in "whispers" on that site. Does… Continue reading Is there such a thing as a concise, clean, serious source to learn about "security leaks" without all the stupid BS? [closed]→

Does Microsoft 365 backup your data?

Posted on September 13, 2021 by Mike Hudson

Microsoft is responsible for protecting the Office 365 physical and virtual infrastructure and ensuring availability. Although Microsoft addresses certain security threats, it cannot prevent all malicious threats. Businesses are responsibl… Continue reading Does Microsoft 365 backup your data?→

How to secure data on production environment

Posted on September 12, 2021 by VB_

Question
Suppose you design a data lake with sensitive data. Due to immaturity of tools, dynamic data masking is unavailable. You have MFA, encryption at rest, audit logging, ETL processing data and people that develop/support/debug that E… Continue reading How to secure data on production environment→