Collaborate Disseminate
Does VirusTotal detect malware in an SQL export? I have an infected WordPress site. I removed the malware with various tools, however I know from experience, that sometimes it hides itself somewhere deep in the database. I di… Continue reading Is VirusTotal useful for finding malware in a WordPress database SQL export?
Do websites like Facebook, Twitter, Reddit, etc encrypt IP addresses from user data (ie account creation, posts, and comments) when stored in their databases for privacy and security purposes?
I work for a small IT firm and we are creating a web application (MVP) for doctors (in the USA).
The patients will register with the application. We will only save their name, email, password (hashed) and “connect” with the … Continue reading Do HIPAA compliant web server and database need to be on the same server?
Suppose we have an SQL database.
Suppose we have a user D who has no read access to some table named EMP (employees).
Suppose we allow him to create a table with a foreign key regarding EMP table. Is the danger here that whe… Continue reading Foreign key constraint danger – information leakage?
In my web app I use various payment providers. I want to be able to edit sensitive data related of them, such as API keys, via a web page. Therefore, to be able to do this, I have to store that data in a file or database. Not… Continue reading How to store keys in a web app which I want to be able to edit via a web page?
I’m generating 128 bit API keys. AFAIK 128 is totally secure for generated key. In the DB I want to store hashes, not the plain text (to be protected against DB leak), but what hashing algorithm should I use? MD5 and SHA-1 ar… Continue reading Which function to hash 128 bit API key with?
I will generate api keys. I plan to store their hashes instead of plain text. do i also need salt, similar to storing password?
AFAIK salt prevents rainbow table attack and those are more sophisticated way of a dictionary a… Continue reading Do I need to use salt with api key hashing?
I was discussing with someone ways to prevent data disclosure from a compromised admin account on a database server. The other person proposed encrypting the data at rest within the database. It sounds like a good idea, but I… Continue reading Would encrypting a database protect against a compromised admin account?
I am wanting to know what kind of damage can be done with this approach.
I have a system setup where a user will land on a webpage then it will fire an xhr request to an external website to scrape a JSON list then save the d… Continue reading Saving external xhr data to database
Microsoft today announced an interesting update to its database lineup with the preview of Azure SQL Database Edge, a new tool that brings the same database engine that powers Azure SQL Database in the cloud to edge computing devices, including, for the first time, Arm-based machines. Azure SQL Edge, Azure corporate vice president Julia White […] Continue reading Microsoft brings Azure SQL Database to the edge (and Arm)