Collaborate Disseminate
I have a kind of weird use case here, and I’m not sure how to deal with it.
I’m working on a project that stores medical data. The following requirement has been addressed by another team, but hasn’t been much documented. I’m… Continue reading How to obfuscate a relation between two tables in a database?
Microsoft today announced that it has acquired Citus Data, a company that focused on making PostgreSQL database faster and more scalable. Citus’ open source PostgreSQL extension essentially turns the application into a distributed database and while there has been a lot of hype around the NoSQL movement and document stores, relational database — and especially PostgreSQL […] Continue reading Microsoft acquires Citus Data
I have this use case:
User1 uploads his file into the database which should be encrypted.
Any other users who request that file, user1 will be notified for approval, on approving other users should be able to view the file … Continue reading Storing files in database through encryption and Viewing them only on providing key for the file
I am an Information security analyst, looking for creative, non traditional, and unapproved ways to query/evaluate DBMS applications that includes SQL Server and PostgreSQL. Goal here is to protect the organization that I wor… Continue reading What would be the best way to evaulate the database management systems?
I recently got a Galaxy Watch and to get acquainted with developing apps for it I’m writing a simple two factor authenticator to generate TOTP codes from entered secrets using the Google Authenticator algorithm. I found this … Continue reading Two-factor authentication on Galaxy Watch – should secrets be encrypted, and is this SQLite example secure?
If your running a web services with lots of users and you get hacked, you may be giving away users’s plain text information like email and hashes like password hashes.
Is it worth storing email addresses as hashes too?
… Continue reading Is it worth storing email addresses as hashes?
Disclaimer: Parameterized queries are the way to go, no need to discuss about that 🙂
I’ve seen the following code at a friends place:
var query = “SELECT * FROM students WHERE name = ” + name;
with name being a user prov… Continue reading Is forbiding the ; char enough to prevent SQL injection?
Detecting infected files in a website or web application is very easy: you just need to compare the files with a clean backup or the original source (for example with diff) and that’s it. However, detecting an infection in a … Continue reading How can I detect an infection in a database?
My question might be broad. Suppose that we trying to store our client’s information data with a database on a server. The server may get a vulnerability and give access to a hacker to get access to the system admin user. Als… Continue reading Prevent Database from accessing with knowing system admin user
When the former CTOs of YouTube, Facebook, and Dropbox seed fund a database startup, you know there’s something special going on under the hood. Jiten Vaidya and Sugu Sougoumarane saved YouTube from a scalability nightmare by inventing and open sourcing Vitess, a brilliant relational data storage system. But in the decade since working there, the pair […] Continue reading They scaled YouTube. Now they’ll shard everyone with PlanetScale