Re: Hiding data in postgresql

Yes, I mean hide. I am approaching the problem out of the perspective of a
malicious user / hacker.


On Mon, May 24, 2010 at 10:08 PM, Bill Moran <wmoran@potentialtech.com>wrote:

> In response to Scott Marlowe <scott.marlowe@gmail.com>:
>
> > On Mon, May 24, 2010 at 1:16 PM, Hector Beyers <hqbeyers@gmail.com>
> wrote:
> > >
> > > Hi guys,
> > > does ANYONE have any tips on hiding data on a database server? This
> means
> > > that data is stored in places that is not necessarily picked up in the
> > > schema of the database. I am doing some research on databases and need
> some
> > > direction.
>
> On a more serious note, I would think the only way to do that would be
> to have columns that are misnamed and don't do what you expect.
>
> For example, have an image column that stores image data with your
> secret data hidden via steganography.  You could do something similar
> with some scheme to hide data in text fields or numeric fields, but I
> don't know of any specific technique.
>
> Assuming you mean _hide_ and not _secure_.  To secure it, encrypt it
> (using something like pgcrypto).
>
> But in the schema?  I doubt it.  PG's data storage is pretty transparent,
> you'd probably have to hack the source to pull that off.
>
> --
> Bill Moran
> http://www.potentialtech.com
> http://people.collaborativefusion.com/~wmoran/
>