4 ms·
I agree with you. Knowing the exact column names can speed up an attack and, in some cases, make it more feasible. Why don’t they just request disclosure of wh
by ic4l 2y ago
I agree with you. Knowing the exact column names can speed up an attack and, in some cases, make it more feasible.
Why don’t they just request disclosure of what’s actually stored and allow renaming of the columns? It seems odd that knowing the exact column names would be necessary if the goal is simply to understand what data is being stored and its intended purpose.
- lIl-IIIl 2y agoI wonder if that would be considered a "new report", which they don't have to provide.
- philipov 2y agoThey can either have their cake or eat it. If they don't want to obfuscate the column names, they have to provide the data with the original ones.
- deleted 2y ago[deleted]
- thaumasiotes 2y ago> Knowing the exact column names can speed up an attack and, in some cases, make it more feasible. If I'm looking at a database, I like knowing column names, but I like knowing table names more.