4 ms·
> Skimmed through the MySQL and Postgres databases, no signs of anything domain-related. I'm betting it's all stored in the custom integrated [and encrypted] KV
by Semaphor 6y ago
> Skimmed through the MySQL and Postgres databases, no signs of anything domain-related. I'm betting it's all stored in the custom integrated [and encrypted] KV database..
-- https://old.reddit.com/r/sysadmin/comments/ma4mwl/the_absolute_worst_case_scenario_happened_what/grqu1i3/ https://old.reddit.com/r/sysadmin/comments/ma4mwl/the_absolu...
- TeMPOraL 6y agoIf the system is old (going by other replies, introduced in a deal 20 years ago), maybe they'll be able to brute-force the encryption...
- michaelt 6y agoEncryption being 20 years old doesn't mean it's easy to break, given that AES is 23 years old :)
- TeMPOraL 6y agoIt doesn't, but in my experience, the ciphers and key sizes commonly used were often not future-proof :). This rests on the assumption that nobody updated the keys/encryption components in 20 years - which I think is quite possible with such internal enterprise deployment.