4 ms·
Question: All of these discussions are based on the hacker having access to your database. If you really don't trust your hosting company not to leak your datab
by oconnore 17y ago
Question:
All of these discussions are based on the hacker having access to your database. If you really don't trust your hosting company not to leak your database details, why do you trust them not to overwrite your administrative password with an appropriately salted bcrypt/whatever hash?
- shin_lao 17y agoThere is a difference between being able to dump tables and being able to alter tables. Generally a lot of people have read access to the database, very little have full write access. The same goes with hacks. It's easier to get unauthorized read access than unauthorized write access.
- ErrantX 17y ago> if you really don't trust your hosting company That is not the case this protects against
- DenisM 17y ago1. Most users use the same email/userid and same password across variety of sites. A compromise of your site should not automatically compromise all other sites. 2. Backups have tendency to leak more so than the server security itself.