Security Basics mailing list archives

Re: security against dba?s


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Thu, 12 Feb 2009 23:32:21 +0100

On 2009-02-12 Nick Vaernhoej wrote:
I am curious about the repeated argument "if you don't trust your
DBA's, hire/promote someone you can trust".
Is that a common perception?
I am personally of the belief that no one is to be trusted and my
system designs should be reflecting this.

How would you protect any system from its administrator?

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: