Re:Total security in a PostgreSQL database
by rpedela on Saturday February 08, 2014 @05:42PM
(#7203155)
Doomed in what way? That the SQL injection allows the attacker to see or mess with data? Or that the attacker somehow gains greater access to the database, server, OS, etc? Or both?
[ Parent
| on HN ]
Re:Total security in a PostgreSQL database
by rubiquity on Saturday February 08, 2014 @06:27PM
(#7203355)
Most attackers won't be SSHing into your servers and firing up psql processes to mash your database as that would require gaining user access, SSH access and psql access. Most attackers will go the cheaper and more likely route of turning your application on your server by using SQL injection.