234 reputation
18
bio website shiftedbits.net
location Albuquerque, NM
age 27
visits member for 3 years, 4 months
seen Feb 21 at 2:32

Give me something to program. It'll make me happy.


Aug
30
awarded  Yearling
Aug
30
awarded  Nice Question
Aug
27
accepted Keeping the password secret over regular http
Aug
27
asked Keeping the password secret over regular http
Dec
9
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
The same idea applies. The idea would be then to generate a key pair using an administrator's password (ideally, one really good password which all admins know from outside the system) for any time a user's details need to be viewed. If you're looking to use that information within the system, say for sending out auto-generated emails, then well that's a bit (lot) more complicated to keep secure, as you have to store both sides of the key (or the password that made the key) for the system to decode the message.
Nov
10
asked Creating a Private Key using Human Intervention
Apr
29
comment Different MySQL Users Security Benefits
@Graham That won't make his answer any more relevant to the question I was asking... Though this is getting useless to argue, so I'm just gonna leave it be.
Apr
29
awarded  Commentator
Apr
29
comment Different MySQL Users Security Benefits
Oh! Thanks for the pointer! I'll definitely be looking into that to see if I can apply it to my application. Thanks again!
Apr
29
comment Different MySQL Users Security Benefits
@ atdre: You did? Where? I don't see it. All you said was to use secure connections, mentioned that there's a bunch of other things about security, and then pointed me to a question that has no relation to what my question was about outside of mysql security. Sure the chosen answer there says something about separation of privileges, but it's not nearly as focused or in depth as a proper answer for what I was looking for. Seriously, your answer would have been better as a comment.
Apr
28
awarded  Citizen Patrol
Apr
28
awarded  Critic
Apr
28
comment Different MySQL Users Security Benefits
We're generally assuming that the secure stuff should already be happening. The question was not about general MySQL Security, but more or less the benefits of implementing the principle of least privilege on the database vs the cost of slightly more complicated code in the app level.
Apr
28
accepted Different MySQL Users Security Benefits
Apr
28
revised Different MySQL Users Security Benefits
edited tags
Apr
28
comment Different MySQL Users Security Benefits
This is very true. Since my case involves MySQL that's where the question originated. It can, at least in my head, be translated to other RDBMSes.
Apr
27
comment Different MySQL Users Security Benefits
Again, some excellent points. Thanks again.
Apr
27
comment Different MySQL Users Security Benefits
So you're saying that the concern should be placed more on the implementation of the idea, as the idea is apparently rather solid? Hmm. You bring up good points. Thanks for the answer!
Apr
27
comment Different MySQL Users Security Benefits
The sanitizer is on my list, and currently stands up to basic testing. Still looking in more places for new attack vectors to test, so that when it goes to production it'll at least be semi prepared to take on the real world. Thanks for the answer!
Apr
27
asked Different MySQL Users Security Benefits