New answers tagged

4 votes

Can ransomware embed itself in to a SQL backup file?

Apart from @Joshua's answer on SQLCLR procedures, there are other places that viruses and ransomware can worm into: Database level DDL triggers, which would have the benefit of being executed by a ...
user avatar
  • 5,169
5 votes

Can ransomware embed itself in to a SQL backup file?

Yes. I've never seen this though. SQL Server has a feature where you can write stored procedures in C#. We looked into using it once. As of a few releases ago, this feature is turned off by default. ...
user avatar
  • 367
2 votes

Can ransomware embed itself in to a SQL backup file?

Generally, ransomware runs as a program in your operating system, encrypts files (possibly depending on file type), and, if you're lucky, doesn't leave any time bombs in decrypted exe files later. ...
user avatar
12 votes

Can ransomware embed itself in to a SQL backup file?

What you typically have to worry about is ransomware finding your backups on the network and encrypting them. When ransomware hits your network, it typically propagates quickly, and locks down ...
user avatar
22 votes

Can ransomware embed itself in to a SQL backup file?

Never say never, but since backups aren't executable files and contain no directly executable code (they're about the data, not the SQL Server software itself) I would think the risk is very, very low....
user avatar
  • 2,145
0 votes

Increase security of mongodb-based flask/react applications?

You can create an user to access specific databases with specific permissions and use it with Flask: https://www.mongodb.com/docs/v5.0/tutorial/create-users/
user avatar
1 vote

Password storage best practices

Correct assumption, if you have to pass them via cleartext, you have to store them either in cleartext, or reversible to cleartext. Best practice would be to store them encrypted, but the application ...
user avatar
  • 346
0 votes

Column data masking security problem

Masking is done pretty late in the process, before returning data to end-user, way after WHERE condition is executed. If the requirement is to strictly do the masking on database level (and not on ...
user avatar
  • 57
2 votes
Accepted

Column data masking security problem

This is Working As Designed™: The application of enabled column masks does not interfere with the operations of other clauses within the statement such as the WHERE, GROUP BY, HAVING, SELECT DISTINCT,...
user avatar
  • 21.1k

Top 50 recent answers are included