Collaborate Disseminate
I am setting up a postgres db that will never be used by humans. In fact, I really don’t need to know it myself ever. I assumed that just using a 256bit(64 alphanumeric chars) hash of a unix timestamp IE:
date +%s%3N | sha256sum
A very im… Continue reading Is a sha256 hash of a unix timestamp a strong password
Discover some of the most popular tools and technologies desired by employers looking to fill data engineering jobs, according to Dattell.
The post Dattell report reveals most popular technologies for data engineers appeared first on TechRepublic.
Continue reading Dattell report reveals most popular technologies for data engineers
By Owais Sultan
Microsoft is a global leader in cloud storage and data protection. They prove that even the most respected…
This is a post from HackRead.com Read the original post: How Data Landlords Put Their Tenants at Risk
Continue reading How Data Landlords Put Their Tenants at Risk
In my application, logged-in users create some strings, and those strings are stored in the Postgres database.
But, because they are in plaintext, their values are visible to me, as I have access to the database.
Is there a way to do some … Continue reading Storing strings in a Database that are only visible to their owner who stored them when they were logged in
So say you are developing multiple different projects for different clients and want your developers to use postgres on their development machine (i.e. localhost connection in the development environment). Does one add much/anything, from … Continue reading Is there much practical security value in using passwords/usernames for postgres instances used on development machines?
I have a simple Java application running in an openjdk Docker container that is executing on a FIPS enabled host system (on a Kubernetes cluster where all nodes have FIPS enabled).
I am running a kubectl apply -f simple-java-deployment.yam… Continue reading How to configure openjdk for FIPS and simple postgres connection example [migrated]
I want to bypass a sql injection waf that replaces /,* and whitespaces.
This is a payload I want use :
?parameter=22321’union select CAST(normal_column AS bigint),’a’,’b’ from normal_table–
But the website replaces the whitespaces with n… Continue reading Bypass sql injection filtering (whitespace, /, *)
Row-level security is often an industry requirement in secure environments, such as those dealing with payment cards.
It’s supported by most major relational databases, including PostgreSQL, Microsoft SQL Server and Oracle. It works by int… Continue reading Does "row-level security" actually serve a security purpose?
I’d like some perspective on the need for Postgres level encryption via pgcrypto (database field encryption for sensitive information) when there’s already disk encryption (ESB) deployed https://devcenter.heroku.com/articles/heroku-postgre… Continue reading Disk encryption and heroku Postgres database field-level encryption
I’m wondering if there are any security concerns with installing PostgreSQL on a Mac using the app?
https://www.postgresql.org/download/macosx/
I had a look at the data folder and it’s owned by me rather than the best practice which I beli… Continue reading Postgres.app security on a Mac?