News for hackers. Stuff that matters.

A comment on Thin PostgreSQL Clones. Parent comment

Re:Thin PostgreSQL Clones by heavenlyblue on Tuesday January 25, 2022 @08:19AM (#30071439)
Do you also store customer personal details and credit cards locally too?
[ Parent | on HN ]
Re:Thin PostgreSQL Clones by coredog64 on Tuesday January 25, 2022 @08:28AM (#30071518)
You can buy a hardware appliance that encrypts credit card numbers for database storage. Then if someone accidentally (or maliciously on purpose) copies your database, you are not exposed to PCI liability.
[ Parent | on HN ]
Re:Thin PostgreSQL Clones by Salgat on Tuesday January 25, 2022 @12:59PM (#30075322)
At least with our DB we tokenize protected information, so all you have in the database is a GUID, the actual sensitive information is stored elsewhere.
[ Parent | on HN ]
Re:Thin PostgreSQL Clones by tfigment on Tuesday January 25, 2022 @08:28AM (#30071517)
Not every database has customer secrets in it. But you are not wrong that it should at least be understood what is sensitive before cloning.
[ Parent | on HN ]