Collaborate Disseminate
The founders of Cockroach Labs wanted to ensure data written in one location would be viewable immediately anywhere on the planet. The use case was simple, but the work needed was herculean. Continue reading How engineers fought the CAP theorem in the global war on latency
Cockroach Labs has many things going for it. The company’s approach to distributed database technology is novel, and it has the potential to gain significant market share internationally. Continue reading “Developers, as you know, do not like to pay for things”
I would like some expert insight. I want to know what my vulnerabilities for this model are.
This is a demo project that I will be following in my production app if all works out securely. My production app will include hybrid encryption f… Continue reading What are my vulnerabilities with this multi-user ACL database approach?
I am designing a login system for my React app.
All user data must be protected in case of a db leak. I only store encrypted data, with the exception of the email.
To encrypt I need a key and I don’t have a place to store keys and storing … Continue reading Am I writing a good login system? [closed]
Issue
I’m trying to devise a simple yet effective method of having a multi-user encrypted remote database. I want a simple way of generating keys without ever exposing or transporting the private keys. I have thought up a method I think co… Continue reading How secure is this multi-user remote database encryption scheme?
I am wondering what methods are used by big companies to protect customer email addresses in their databases. They usually have salespeople all over the world and multiple third-parties (Salesforce, transactional emails, etc.) also need to… Continue reading How to protect email addresses in a customer database when you and other third parties must be able to send emails?
Let’s say there is some vulnerable page and it gets SQL injected. PHP on the backend only returns specific rows and does not return passwords in any way. How do people get the passwords using that?
Continue reading Sql injection how does getting data outside from susposed rows works? [duplicate]
For PII, we capture mostly emails, mobile and name of users who signup on our website. Along with this purchases made by users are also a sensitive data. Protecting this data for users privacy is as important as not letting any disgruntled… Continue reading How to protect PII data from being sold or exposed by employees
If I have to log in to my database (FireBase RealtimeDB), the login will always be in my code, so how do services secure their databases?
IPs can be spoofed so you can’t do it by whitelisting IPs, secure tokens even if not visible, the con… Continue reading Secure the webserver’s database when credentials are in the web code [closed]
what if I have a website database credential
like this which was found in debug mode open section
-DB_CONNECTION=mysql
-DB_HOST=rm-bp133q688322yc2x64o.mysql.example.com
-DB_PORT=3306
-DB_DATABASE=example
-DB_USERNAME=example_root
-DB_PASSW… Continue reading Env file database credential disclose vulnerability [closed]