Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 12
Impact
~6k people reached

Feb
2
awarded  Popular Question
Nov
17
awarded  Popular Question
Nov
17
awarded  Popular Question
Sep
29
awarded  Popular Question
Jul
2
awarded  Curious
Oct
28
comment How can I replace constants 5,6 & 8 in sql instead of in condition
Have a subquery look for party_approval_type_id in another table.
Aug
5
revised Should I be concered by large SERIAL values?
Fixed typo in blockquote (231 to 2^31), and also changed formatting of all exponents.
Aug
5
suggested approved edit on Should I be concered by large SERIAL values?
Jun
11
accepted Having a PostgreSQL database exposed to the internet
Jun
11
comment Having a PostgreSQL database exposed to the internet
I'm marking this one as the answer because of your explanation about minimising "attack surfaces", but I'm still failing to understand the benefits of shifting security elsewhere. I'm inclined to follow @CraigRinger's advice.
Jun
10
comment Having a PostgreSQL database exposed to the internet
That still doesn't sound like the web service offers much advantage over having a database user who is only allowed to call a small set of functions (i.e. the same "actions" that the web service offers). Plus, any changes to the database require changes to the web service also, as well as the front-end.
Jun
10
comment Having a PostgreSQL database exposed to the internet
How is the web service inherently more secure though? Why is shifting security to a web server more secure than leaving it with the database, especially if the database only accepts connections from those with valid certs? The problem is, if I have to expose the database via a web service this will require changing a lot of code in the existing front-end (which is not web-based). If it is the only way, then I'll just have to do it, but I need to know what the risks are of having a database exposed if it is configured only to accept SSL-certified connections.
Jun
10
comment Having a PostgreSQL database exposed to the internet
This makes sense. If for example I had a front-end already developed to make direct connections to the database, would it still be better to tunnel these through a VPN or SSH connection?
Jun
9
revised Having a PostgreSQL database exposed to the internet
Title was mispelled
Jun
9
asked Having a PostgreSQL database exposed to the internet
May
20
awarded  Caucus
May
20
awarded  Constituent
Jan
12
comment Subqueries run very fast individually, but when joined are very slow
Actually I'm not even sure that would help...
Jan
12
comment Subqueries run very fast individually, but when joined are very slow
Does MySQL support CTEs?
Nov
9
revised Tricky selection of grouped rows, selecting based on values of two distinct but related rows
added 811 characters in body