From: | Hector Beyers <hqbeyers(at)gmail(dot)com> |
---|---|
To: | Bill Moran <wmoran(at)potentialtech(dot)com> |
Cc: | Scott Marlowe <scott(dot)marlowe(at)gmail(dot)com>, pgsql-general(at)postgresql(dot)org |
Subject: | Re: Hiding data in postgresql |
Date: | 2010-05-24 20:18:51 |
Message-ID: | AANLkTilvwQXHVkeAMmAlAnYYNEMRsTZG7pmzZxoyMRBz@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general pgsql-hackers |
Yes, I mean hide. I am approaching the problem out of the perspective of a
malicious user / hacker.
On Mon, May 24, 2010 at 10:08 PM, Bill Moran <wmoran(at)potentialtech(dot)com>wrote:
> In response to Scott Marlowe <scott(dot)marlowe(at)gmail(dot)com>:
>
> > On Mon, May 24, 2010 at 1:16 PM, Hector Beyers <hqbeyers(at)gmail(dot)com>
> wrote:
> > >
> > > Hi guys,
> > > does ANYONE have any tips on hiding data on a database server? This
> means
> > > that data is stored in places that is not necessarily picked up in the
> > > schema of the database. I am doing some research on databases and need
> some
> > > direction.
>
> On a more serious note, I would think the only way to do that would be
> to have columns that are misnamed and don't do what you expect.
>
> For example, have an image column that stores image data with your
> secret data hidden via steganography. You could do something similar
> with some scheme to hide data in text fields or numeric fields, but I
> don't know of any specific technique.
>
> Assuming you mean _hide_ and not _secure_. To secure it, encrypt it
> (using something like pgcrypto).
>
> But in the schema? I doubt it. PG's data storage is pretty transparent,
> you'd probably have to hack the source to pull that off.
>
> --
> Bill Moran
> http://www.potentialtech.com
> http://people.collaborativefusion.com/~wmoran/
>
From | Date | Subject | |
---|---|---|---|
Next Message | Peter Hunsberger | 2010-05-24 20:23:38 | Re: Hiding data in postgresql |
Previous Message | Hector Beyers | 2010-05-24 20:10:36 | Re: Hiding data in postgresql |
From | Date | Subject | |
---|---|---|---|
Next Message | Alvaro Herrera | 2010-05-24 20:23:37 | Re: unnailing shared relations (was Re: global temporary tables) |
Previous Message | Hector Beyers | 2010-05-24 20:10:36 | Re: Hiding data in postgresql |