9

When your organization is subject to the GDPR, then it should have a designated Data Protection Officer. This person is responsible for ensuring that data protection laws are applied within the organization. This should be the first place to report to.


2

Blockchain database like Bitcoin works on essentially the same constraint and principle. So yes, it can be made safe. With that said, it's easy to get this wrong and unless you're doing something like a Bitcoin, there are often simpler and easier ways to achieve the same security goals. There are also lots of ways to make something that matches your ...


1

Yes, if your database is exposing itself to the internet. A database can be configured to listen on the network in order for other, authorized computers to connect. If it is exposed and all this information is public, then anyone will be able to perform privileged actions on that database even if they shouldn't. Still, you shouldn't be revealing your ...


1

For SHA-2, SHA-3, Skein, Blake2, etc. the password is the weakest link in the chain. There are two potential attacks on such hashes which allow user impersonation. Besides things like rubber-hose attacks, surveillance, and social engineering. Determine the password by brute force, guess-and-check Search for another "password" which produces identical output ...


1

The short answer is "It depends", and most of the "depends" is based on the implementation details. But it also depends on what, precisely, you're attempting to achieve. If the goal is a simple security scheme where casual users can have a high assurance that they, and only they, can edit their own content -- with the understanding that the database ...


1

tldr: The approach you outline fails do address the actual problem, use a separate application and a secure authentication scheme. While you are right that keeping account credential information with the rest of the lot (i.e. whatever your application actually uses when it's not authenticating users) is a bad idea (tm), the approach to just have a second ...


Only top voted, non community-wiki answers of a minimum length are eligible