Hosting Provided By

Re: [GENERAL] Securing stored procedures and triggers

From: Sam Mason <sam(at)samason.me.uk>
Date: Wed Oct 31 2007 - 21:23:18 EDT

On Wed, Oct 31, 2007 at 05:18:58PM -0400, mgould wrote:
> Thanks all. In the open source community there seems to be more
> talent to "hack" than in other environments.

I think we're just much more honest about what the technology is really capable of. None of us is likely to actually bother breaking into anything, it's just that once you understand the fundamental building blocks of computers it's reasonably easy to determine specific properties. People involved in FOSS projects generally have a much better understanding of this that in other environments.

> Once I told ASA to set
> the "hidden" attribute, I've not had any problems with this, at least
> that I've heard of.

Which, almost by definition in security, you're not going to hear about.

> I was hoping that I'd be able to keep others out
> of the database totally but I can't host these applications for all of
> my customers.

In absolute terms you can't protect code. The whole point of computers and information is that it's very difficult to lock down. Witness the trouble that the big media companies are having with trying to "protect" the contents of their DVD/CD's.

Sam

---------------------------(end of broadcast)---------------------------

TIP 4: Have you searched our list archives?

http://archives.postgresql.org/ Received on Wed Oct 31 22:25:01 2007

Do you need help?

This message: [ Message body ]
Next message: Tom Lane: "Re: [GENERAL] current_user changes immediately after login"
Previous message: Christian Schröder: "[GENERAL] current_user changes immediately after login"
In reply to: mgould: "Re: [GENERAL] Securing stored procedures and triggers"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Mon Jun 16 2008 - 19:11:07 EDT