Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Sam Mason
On Wed, Oct 31, 2007 at 05:18:58PM -0400, mgould wrote: > Thanks all. In the open source community there seems to be more > talent to "hack" than in other environments. I think we're just much more honest about what the technology is really capable of. None of us is likely to actually bother bre

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread mgould
007 14:26:51 -0400 Subject: Re: [GENERAL] Securing stored procedures and triggers There's not bulletproof way, in my opinion. If they copy the whole DB structure *and* the object binaries they'll have the very same functionalities! Il Wednesday 31 October 2007 16:13:23 Douglas McNaug

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Douglas McNaught
"Scott Marlowe" <[EMAIL PROTECTED]> writes: > On 10/31/07, Douglas McNaught <[EMAIL PROTECTED]> wrote: > >> The only bulletproof way to do this currently is to write all your >> stored functions in C and load them as a shared library. > > Well, as I pointed out in my post, even that's not bullet-p

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Scott Marlowe
On 10/31/07, Douglas McNaught <[EMAIL PROTECTED]> wrote: > The only bulletproof way to do this currently is to write all your > stored functions in C and load them as a shared library. Well, as I pointed out in my post, even that's not bullet-proof. As long as decompilers / debuggers etc... exis

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Scott Marlowe
On 10/31/07, mgould <[EMAIL PROTECTED]> wrote: > > > We are currently migrating from Sybase's ASA 9/10 to PostGres 8.2.4. One of > the features that is really nice in ASA is the ability to add the attribute > hidden to a Create procedure, Create function and Create trigger. > Essentially what this

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Reg Me Please
There's not bulletproof way, in my opinion. If they copy the whole DB structure *and* the object binaries they'll have the very same functionalities! Il Wednesday 31 October 2007 16:13:23 Douglas McNaught ha scritto: > mgould <[EMAIL PROTECTED]> writes: > > We are currently migrating from Sybase'

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Douglas McNaught
mgould <[EMAIL PROTECTED]> writes: > We are currently migrating from Sybase's ASA 9/10 to PostGres 8.2.4. > One of the features that is really nice in ASA is the ability to add > the attribute hidden to a Create procedure, Create function and > Create trigger. Essentially what this does is encryp

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Albe Laurenz
mgould wrote: > We are currently migrating from Sybase's ASA 9/10 to PostGres > 8.2.4. One of the features that is really nice in ASA is the > ability to add the attribute hidden to a Create procedure, > Create function and Create trigger. Essentially what this > does is encrypt the code so t

Re: [GENERAL] Securing stored procedures and triggers

2007-10-31 Thread Reg Me Please
Il Wednesday 31 October 2007 15:39:55 mgould ha scritto: > We are currently migrating from Sybase's ASA 9/10 to PostGres 8.2.4. One > of the features that is really nice in ASA is the ability to add the > attribute hidden to a Create procedure, Create function and Create trigger. > Essentially wh