Search Postgresql Archives

Re: postgresql.key secure storage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Sam Mason <sam@xxxxxxxxxxxxx> writes:
> On Mon, Sep 14, 2009 at 05:45:14PM +0200, Saleem EDAH-TALLY wrote:
>> Le Monday 14 September 2009 16:13:45, vous avez écrit :
>>> "Secure wallet" is an exercise in self-delusion.
>> 
>> Not really. How can a user extract data from a container, by whatever
>> name we call it, if he does not have the key to open it ?

> Exactly the same way that libpq does--debuggers are powerful tools!

Or even easier, modify the source code of libpq to print out the data
after it's extracted it.  Security in an open-source world requires
a different set of tools than security in a closed-source world.

			regards, tom lane

-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux