New answers tagged security
4
votes
Can ransomware embed itself in to a SQL backup file?
Apart from @Joshua's answer on SQLCLR procedures, there are other places that viruses and ransomware can worm into:
Database level DDL triggers, which would have the benefit of being executed by a ...
- 5,169
5
votes
Can ransomware embed itself in to a SQL backup file?
Yes. I've never seen this though.
SQL Server has a feature where you can write stored procedures in C#. We looked into using it once. As of a few releases ago, this feature is turned off by default.
...
- 367
2
votes
Can ransomware embed itself in to a SQL backup file?
Generally, ransomware runs as a program in your operating system, encrypts files (possibly depending on file type), and, if you're lucky, doesn't leave any time bombs in decrypted exe files later.
...
- 139
12
votes
Can ransomware embed itself in to a SQL backup file?
What you typically have to worry about is ransomware finding your backups on the network and encrypting them. When ransomware hits your network, it typically propagates quickly, and locks down ...
- 2,685
22
votes
Can ransomware embed itself in to a SQL backup file?
Never say never, but since backups aren't executable files and contain no directly executable code (they're about the data, not the SQL Server software itself) I would think the risk is very, very low....
- 2,145
0
votes
Increase security of mongodb-based flask/react applications?
You can create an user to access specific databases with specific permissions and use it with Flask:
https://www.mongodb.com/docs/v5.0/tutorial/create-users/
- 1
1
vote
Password storage best practices
Correct assumption, if you have to pass them via cleartext, you have to store them either in cleartext, or reversible to cleartext. Best practice would be to store them encrypted, but the application ...
- 346
0
votes
Column data masking security problem
Masking is done pretty late in the process, before returning data to end-user, way after WHERE condition is executed.
If the requirement is to strictly do the masking on database level (and not on ...
- 57
2
votes
Accepted
Column data masking security problem
This is Working As Designed™:
The application of enabled column masks does not interfere with the operations of other clauses within the statement such as the WHERE, GROUP BY, HAVING, SELECT DISTINCT,...
- 21.1k
Top 50 recent answers are included