News for hackers. Stuff that matters.

A comment on Ask HN: Protecting database information?. Parent comment

Re:Ask HN: Protecting database information? by tixocloud on Wednesday June 15, 2016 @11:39AM (#11909965)
Basically my database will always be 2X?

Curious but given that WhatApp recently encrypts messaging end-to-end, does this mean that even they can't view the information? Does this mean WhatsApp would have no way of detecting if it's application is being used for organizing illegal activity?

[ Parent | on HN ]
Re:Ask HN: Protecting database information? by coo1k on Wednesday June 15, 2016 @01:14PM (#11910590)
OR you could encrypt user password with your public key. Then when you login, you can decrypt user password with your private key. Then go on decrypting user information with that password. This way you won't have to make copy of information posted by users and still will be able to view it with admin login.
[ Parent | on HN ]
Re:Ask HN: Protecting database information? by zimpenfish on Wednesday June 15, 2016 @03:30PM (#11911499)
Doesn't that mean anyone who captures the "admin" private key has full access to the database?
[ Parent | on HN ]
Re:Ask HN: Protecting database information? by coo1k on Wednesday June 15, 2016 @04:51PM (#11912062)
Yes, but since the key resides with admin and not on server, I am assuming the private key will be stored securely.
[ Parent | on HN ]
Re:Ask HN: Protecting database information? by coo1k on Wednesday June 15, 2016 @12:31PM (#11910294)
Yes. See para 2. https://blog.whatsapp.com/10000618/end-to-end-encryption
[ Parent | on HN ]