Re: [HACKERS] Security and Data Protection Issues

2008-07-14 Thread Bruce Momjian
Stuart Gundry wrote: I am setting up a postgres database on a standalone system with a randomized text password. However, the db will contain very sensitive data and my boss is worried about the possibility of someone being able to crack the db data if they stole the machine. Can anyone point

Re: [HACKERS] Security and Data Protection Issues

2008-07-10 Thread Stuart Gundry
Thank you, I'm also curious as to whether the data folder is already in some way encrypted and if so, what encryption/obfuscation is being used. There doesn't seem to be anything about this on the web.

Re: [HACKERS] Security and Data Protection Issues

2008-07-10 Thread Richard Huxton
Stuart Gundry wrote: Thank you, I'm also curious as to whether the data folder is already in some way encrypted and if so, what encryption/obfuscation is being used. There doesn't seem to be anything about this on the web. No encryption, although large text fields may be compressed (read up on

Re: [HACKERS] Security and Data Protection Issues

2008-07-10 Thread Jan Urbański
Stuart Gundry wrote: Been looking into truecrypt but can't seem to get it to play nice with postgres silent installer. When I try to set the BASEDIR=M:\, which is where I mounted my encrypted volume it gives the following error in the log The Cacls command can be run only on disk drives that

[HACKERS] Security and Data Protection Issues

2008-07-09 Thread Stuart Gundry
I am setting up a postgres database on a standalone system with a randomized text password. However, the db will contain very sensitive data and my boss is worried about the possibility of someone being able to crack the db data if they stole the machine. Can anyone point me to information about

Re: [HACKERS] Security and Data Protection Issues

2008-07-09 Thread Jan Urbański
Stuart Gundry wrote: I am setting up a postgres database on a standalone system with a randomized text password. However, the db will contain very sensitive data and my boss is worried about the possibility of someone being able to crack the db data if they stole the machine. Can anyone point me