Skip to main content

All Questions

Filter by
Sorted by
Tagged with
1 vote
0 answers
325 views

MySQL encrypt fields and decrypt them with a password

I'm trying to figure out the best approach to store some information into a DB that will only be accessible by specific users through a password. So let's say I've got user X that stores something ...
Yamile's user avatar
  • 11
1 vote
2 answers
109 views

Trustless Application Architecture for end-users with secure enclaves

I am working on a project where I want to store end-user private data, but immediately this brings up the trust question of why a user would trust me to hold their data. I don't actually want to hold ...
vin42tau's user avatar
3 votes
1 answer
640 views

Does "row-level security" actually serve a security purpose?

Row-level security is often an industry requirement in secure environments, such as those dealing with payment cards. It's supported by most major relational databases, including PostgreSQL, Microsoft ...
watchowl's user avatar
  • 5,468
1 vote
0 answers
399 views

Keeping data confidential from the system administrator

Problem How do I ensure that I cannot access confidential data manually through the database? Practically speaking, this is a firestore database on google cloud, and I have access to the administrator ...
Programmdude's user avatar
1 vote
2 answers
1k views

Confidentiality and Integrity violation in database security

I read some topics on database security. Now I have two questions about confidentiality and integrity violation, Thanks anyone who answers me: If we consider knowing the availability of data as a ...
ThisIsMe's user avatar
0 votes
0 answers
886 views

Hashing Identifiers to Create Pseudonyms

I'm wanting to share datasets between two organisations in a pseudonymised way such that they link together via mutual entities (e.g. people) but so that the entities cannot be identified. E.g.: ...
Drunk Goldfish's user avatar
7 votes
2 answers
3k views

If encrypted data in a database are accessed by application, does that mean that the application has the decryption key?

I'm using an application linked to a database which holds confidential data (numbers). According to the developer, this data is encrypted. However, i can easily generate a report that will show the ...
Optimus Prime's user avatar
6 votes
2 answers
733 views

Can a web application administrator access the database of that application?

We have a web application linked to a database. The database is secured but contains unmasked confidential numbers. Can a normal administrator who can access the application, access those numbers in ...
Optimus Prime's user avatar
6 votes
3 answers
4k views

storing the third party credentials in the database/some secure place

This question is about storing the third party credentials in the database/some secure place so that it can not be accessed by only authorized user. Our system connect to the third party system using ...
user avatar