On 2022-12-22 09:17:18 +0100, Rainer Duffner wrote:
>     Am 22.12.2022 um 00:57 schrieb Benedict Holland <
>     benedict.m.holl...@gmail.com>:
> 
>     If someone has root, I don't know how they also don't have your
>     encryption keys. 
> 
> 
> They are not on the same box. They are in a HSM. A dedicated piece of
> tamper-proof hardware that stores secrets (keys).
> The Oracle-server needs to talk to the HSM to get the keys. 

If the hacker has root access: What prevents them from talking to the
HSM?

        hp

-- 
   _  | Peter J. Holzer    | Story must make more sense than reality.
|_|_) |                    |
| |   | h...@hjp.at         |    -- Charles Stross, "Creative writing
__/   | http://www.hjp.at/ |       challenge!"

Attachment: signature.asc
Description: PGP signature

Reply via email to