Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Kiriakos Georgiou
On Mar 19, 2012, at 5:55 PM, Bill Moran wrote: > >> Sensitive data should be stored encrypted to begin. For test databases you >> or your developers can invoke a process that replaces the real encrypted >> data with fake encrypted data (for which everybody has the key/password.) >> Or if the

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Bill Moran
In response to Kiriakos Georgiou : > The data anonymizer process is flawed because you are one misstep away from > data spillage. In our case, it's only one layer. Other layers that exist: * The systems where this test data is instantiated can't send email * The systems where this exist have li

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Kiriakos Georgiou
The data anonymizer process is flawed because you are one misstep away from data spillage. Sensitive data should be stored encrypted to begin. For test databases you or your developers can invoke a process that replaces the real encrypted data with fake encrypted data (for which everybody has

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Janning Vygen
Am 19.03.2012 um 13:22 schrieb Bill Moran : > In response to Janning Vygen : >> >> I am working on postgresql 9.1 and loving it! >> >> Sometimes we need a full database dump to test some performance issues >> with real data. >> >> Of course we don't like to have sensible data like bunches of e

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Bill Moran
In response to Janning Vygen : > > I am working on postgresql 9.1 and loving it! > > Sometimes we need a full database dump to test some performance issues > with real data. > > Of course we don't like to have sensible data like bunches of e-mail > addresses on our development machines as they

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Marko Kreen
On Mon, Mar 19, 2012 at 10:12:01AM +0100, hari.fu...@gmail.com wrote: > Janning Vygen writes: > > pgcrypto does not work for this scenario as far as i know. > > > > pgcrypto enables me to encrypt my data and let only a user with the > > right password (or key or whatever) decrypt it, right? So if

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread hari . fuchs
Janning Vygen writes: > pgcrypto does not work for this scenario as far as i know. > > pgcrypto enables me to encrypt my data and let only a user with the > right password (or key or whatever) decrypt it, right? So if i run it > in a test environment without this password the application is broke

Re: [GENERAL] Anonymized database dumps

2012-03-19 Thread Janning Vygen
pgcrypto does not work for this scenario as far as i know. pgcrypto enables me to encrypt my data and let only a user with the right password (or key or whatever) decrypt it, right? So if i run it in a test environment without this password the application is broken. I still want to use these

Re: [GENERAL] Anonymized database dumps

2012-03-18 Thread Kiriakos Georgiou
I would store sensitive data encrypted in the database. Check the pgcrypto module. Kiriakos On Mar 18, 2012, at 1:00 PM, Janning Vygen wrote: > Hi, > > I am working on postgresql 9.1 and loving it! > > Sometimes we need a full database dump to test some performance issues with > real data.

[GENERAL] Anonymized database dumps

2012-03-18 Thread Janning Vygen
Hi, I am working on postgresql 9.1 and loving it! Sometimes we need a full database dump to test some performance issues with real data. Of course we don't like to have sensible data like bunches of e-mail addresses on our development machines as they are of no interest for developers and s