Home |  MySQL Buzz |  FAQ |  Feeds |  Submit your blog feed |  Feedback |  Archive |  Aggregate feed RSS 2.0 English Deutsch Español Français Italiano 日本語 Русский Português 中文
Showing entries 1 to 12

Displaying posts with tag: encryption (reset)

Why use encrypted backup with Percona XtraBackup 2.1 for MySQL?
+0 Vote Up -0Vote Down

We just released our first alpha of Percona XtraBackup 2.1 for MySQL and with it we included the ability to encrypt backups on the fly (full documentation here). This feature is different than simply piping the backup stream through the openssl or gpg binaries, which is what some people have used in the past. A big benefit of using the built-in encryption is that multiple CPU cores can be used for encryption

  [Read more...]
Transparent encryption does not make your database secure
+5 Vote Up -0Vote Down
Transparently encrypted storage of *any* kind (storage engine based data encryption, truecrypt volume encryption, bitkeeper, etc) is *just as insecure* to most types of attack as non-encrypted data.  SQL injection or security escalation vulnerabilities, operating system vulnerabilities and cross site scripting attacks could give attackers access to the database data.  It doesn't matter if you encrypt the database's physical storage in the database itself (in the storage engine layer) or on disk (at the filesystem level) since either way the data is presented unencrypted through the SQL interface. 

Transparent encryption is great for protecting your laptop data from theft by stealing your laptop.  It is very unlikely someone will attack your server by stealing it.

It doesn't protect you from a malicious SQL injection which drops all your tables or reads



  [Read more...]
One-way Password Crypting Flaws
+0 Vote Up -0Vote Down

I was talking with a client and the topic of password crypting came up. From my background as a C coder, I have a few criteria to regard a mechanism to be safe. In this case we’ll just discuss things from the perspective of secure storage, and validation in an application.

  • use a digital fingerprint algorithm, not a hash or CRC. A hash is by nature lossy (generates evenly distributed duplicates) and a CRC is intended to identify bit errors in transmitted data, not compare potentially different data.
  • Store/use all of the fingerprint, not just part (otherwise it’s lossy again).
  • SHA1 and its siblings are not ideal for this purpose, but ok. MD5 and that family of “message digests” has been proven flawed long ago, they can be “freaked” to create a
  •   [Read more...]
    TunnelMaker, a simple script to generate multi-hop SSH tunnels
    +0 Vote Up -0Vote Down

    SSH tunnels provide a very effective means to access remote services and applications. Not only does it provide encryption of data between hosts, but it allows you to route connections between a sequence of servers, thus chaining connections. A common use of this method is to provide encrypted connections to MySQL servers so that user accounts can be limited to only “localhost” privileges, yet accessed from remote workstations without having to run MySQL+SSL.

    The concept is simple, for example let’s say you have three servers: localhost (your workstation in America), a server in Europe, and a server in Japan. You want to access Apache running on port 80 on the Japan server but because of firewall restrictions you cannot access port 80 remotely, and to make things more difficult the Japan server only allows SSH connections from the Europe server’s IP. We can

      [Read more...]
    SQL Injections, Again…
    +0 Vote Up -0Vote Down
    Last Friday the Dutch TV program Zembla aired part two of the "verzuimpolitie" series. The first part was mainly about how employers could access medical information about employees. There is a news article about the second part here (with google translate).



      [Read more...]
    How To Set Up MySQL Database Replication With SSL Encryption On Debian Squeeze
    +1 Vote Up -0Vote Down

    How To Set Up MySQL Database Replication With SSL Encryption On Debian Squeeze

    This tutorial describes how to set up database replication in MySQL using an SSL connection for encryption (to make it impossible for hackers to sniff out passwords and data transferred between the master and slave). MySQL replication allows you to have an exact copy of a database from a master server on another server (slave), and all updates to the database on the master server are immediately replicated to the database on the slave server so that both databases are in sync. This is not a backup policy because an accidentally issued DELETE command will also be carried out on the slave; but replication can help protect against hardware failures though.

    Reminder: Tech Webinar on Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Reminder, mark you callendar:

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Solaris, Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>


    Reminder: Tech Webinar on Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Reminder, mark you callendar:

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Solaris, Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>


    Reminder: Tech Webinar on Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Reminder, mark you callendar:

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Solaris, Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>


    Tech Webinar: Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>

    Tech Webinar: Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>

    Tech Webinar: Security for Web Application
    Employee +0 Vote Up -0Vote Down

    Wednesday January 27th, Join the Sun Startup Essentials Webinar on  Security for Web Applications.

    A key success factor for Web startups is to protect their applications and data from different security threats. Join this webinar to learn about security challenges and about key solutions such as encryption, authentication, certificates, secure and fault-tolerant storage, chrooted environments. The Sun Startup Essentials experts will also cover how to implement these solutions at minimal cost by using standard and open components such as Apache, MySQL, ZFS and more.

    Registration limited to members of the Sun Startup Essentials program.

    Your company is less than 6 year and  150 employee: Join Sun Startup Essentials >>

    Showing entries 1 to 12

    Planet MySQL © 1995, 2013, Oracle Corporation and/or its affiliates   Legal Policies | Your Privacy Rights | Terms of Use

    Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.