Collaborate Disseminate
Someone asked me to create a site for their online business which I did, handling a lot of the development myself. After I created my account on the site I told my employer “Hey, the site is ready you can create an account fo… Continue reading Business founder wants access to database but has no DB skills
I would like to clarify protection practices for handling database secrets with database connected web application, using Docker containers. The aim is to determine how to protect secrets even if an attacker attains a shell i… Continue reading Web application secrets protection following code execution
I’m exploring a solution that would allow large technology companies to allow access to their database for analysis, in a way that would protect the privacy of its users. I would love feedback on the idea.
The problem
Many l… Continue reading Accessing sensitive database through public analysis to preserve privacy
If you’re an American of European descent, there’s a 60% chance you can be uniquely identified by public information in DNA databases. This is not information that you have made public; this is information your relatives have made public. Research paper: "Identity inference of genomic data using long-range familial searches." Abstract: Consumer genomics databases have reached the scale of millions… Continue reading How DNA Databases Violate Everyone’s Privacy
According to this post, Chrome passwords are stored in /Users/$USER/Library/Application Support/Google/Chrome/Default/databases/Databases.db. Is it possible for an attacker to copy Chrome passwords found in Databases.db and v… Continue reading Is it possible to open Chrome’s databases.db in another MacBook?
All the data we have on our customers sits in our data-lake, which is hosted by one of our suppliers. Currently the security is such that a limited number of users has (limited) access to the database each with their user-name and password… Continue reading IP-whitelisting for DB access, does solution fit best practices?
In order to check the effectiveness of an antimalware solution, I want access to malware files databases.
My problem is that after Google research, any database mentioned is either restricted (3 weeks and I am still not accep… Continue reading Malicious files Database [on hold]
With full password authentication, you need to enter the full password every time.
With partial password authentication, you’re asked for some subset of the password each time, and which characters you need is different for each attempt.
… Continue reading Are partial passwords a security improvement over full passwords?
I’ve been asked to expose the database of a web app publicly so that an external service can connect directly to the database (via username/password) to read information. This database is currently behind a firewall, with the… Continue reading Security consequences of a publicly accessible database?
It’s time for the next version of SQL Server, Microsoft’s flagship database product. The company today announced the first public preview of SQL Server 2019 and while yet another update to a proprietary database may not seem all that exciting at first glance, Microsoft is trying to do a few rather interesting things with this […] Continue reading Microsoft’s SQL Server gets built-in support for Spark and Hadoop