[prev in list] [next in list] [prev in thread] [next in thread] 

List:       hsqldb-user
Subject:    Re: [Hsqldb-user] securing data in the .script file
From:       JP <gofastboat () gmail ! com>
Date:       2009-04-22 12:43:50
Message-ID: 4a4c01750904220543q2bf505t43276931b72ec838 () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Good point...  A knowledgeable user could still read into the files using
HSQLDB.  So is there actually a way to implement encryption on the files or
are you just stating that it would be nice to have that feature?
The guide mentions encrypting connections, but as mentioned before, I'm just
connecting locally, so they have access to the file.  Also, I am
using 1.8.0.10, not 1.9...

On Wed, Apr 22, 2009 at 6:46 AM, fredt <fredt@users.sourceforge.net> wrote:

>  This method is not secure. It only prevents casual browsing.
> I suppose you are suggesting encryption of data files is required.
> Encrypted files are useful to protect the data from non-users who do not
> have the password. Those who have the password can start the database and if
> they have the necessary computer knowledge, can use other programs to
> perform selective memory dumps and read the internal data of the
> application.
>
> Fred
>

[Attachment #5 (text/html)]

Good point...  A knowledgeable user could still read into the files using HSQLDB.  So \
is there actually a way to implement encryption on the files or are you just stating \
that it would be nice to have that feature?<div><br> </div><div>The guide mentions \
encrypting connections, but as mentioned before, I&#39;m just connecting locally, so \
they have access to the file.  Also, I am using 1.8.0.10, not 1.9...</div><br><div \
class="gmail_quote">On Wed, Apr 22, 2009 at 6:46 AM, fredt <span dir="ltr">&lt;<a \
href="mailto:fredt@users.sourceforge.net">fredt@users.sourceforge.net</a>&gt;</span> \
wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex;">





<div bgcolor="#ffffff">
<div><font size="2">This method is not secure. It only prevents casual 
browsing.</font></div>
<div><font size="2">I suppose you are suggesting encryption of data files is 
required. Encrypted files are useful to protect the data from non-users who do 
not have the password. Those who have the password can start the database and if 
they have the necessary computer knowledge, can use other programs to perform 
selective memory dumps and read the internal data of the 
application.</font></div>
<div><font size="2"></font> </div>
<div><font size="2">Fred</font></div></div></blockquote></div>



------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p

_______________________________________________
Hsqldb-user mailing list
Hsqldb-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/hsqldb-user


[prev in list] [next in list] [prev in thread] [next in thread]