3 ms·
Not only that, the company must not have a single front end dev open up dev tools for 30 days (which should happen at least once a month if anybody is debugging
by landryraccoon 7y ago
Not only that, the company must not have a single front end dev open up dev tools for 30 days (which should happen at least once a month if anybody is debugging or doing any frontend dev whatsoever), and notice that the usual json payload from the server is encrypted and can't show up in devtools, plus there's this weird outgoing request to a domain they don't recognize? And absolutely no devops or logging notices an request to some weird domain (which must be handling tons of requests and have great uptime and scalability, since every single client has to connect to it to decrypt the database).
Oh, and there must not be a DBA at the company either, since absolutely nobody ran a SQL or analytics query in an entire month and noticed that some of the rows were full of unreadable garbage..
This story must be about someone's single server, single dev LAMP blog from ten years ago if it ever actually happened.
- ipython 7y agoThe encryption would happen on the server, not the client. Besides, what json? The server just returns rendered html as the lord intended :) Yes, we are talking about the long tail of little LAMP servers handling small business needs with some custom code written by a contracting shop. What’s a devops? DBA? Once the site is developed and working, there’s little reason to pay to change it.
- landryraccoon 7y agoIf they have full sql read write access on the server, it’s way easier to make a copy of the db, encrypt it, then blow away the original db in one go.
- ec109685 7y agoWouldn’t catch the backups.