News for hackers. Stuff that matters.

A comment on Equifax IT staff had to rerun hackers' queries to work out what was nicked. Parent comment

Re:Equifax IT staff had to rerun hackers' queries to work ou... by paul_milovanov on Wednesday September 19, 2018 @10:31PM (#18029327)
Hold on, do you know for a fact that EPIC specifically doesn't encrypt data at rest? I'm not questioning your competence/knowledge, just trying to understand specifically what you're saying.
[ Parent | on HN ]
Re:Equifax IT staff had to rerun hackers' queries to work ou... by specialist on Thursday September 20, 2018 @12:48AM (#18029854)
The database or file system is likely (hopefully) encrypted. I'm referring to record and field level encryption. Like this:

Translucent Databases http://a.co/d/5855TYO http://wayner.org/node/46

Think of how password databases don't actually store passwords. Instead they (should) be storing salted and hashed passwords.

---

Please see my other comment about plaintext demographic data vs using unique identifiers.

[ Parent | on HN ]