Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS SQL Server 2005 Adds Security Features

Posted by simoniker on from the lock-things-up dept.

nycsubway writes "Microsoft is planning to add in its own encryption and decryption to its newest version of SQL Server. From the article: 'The company is writing complex encryption and decryption functionality directly into the product so customers don't have to procure security features from a third party, or roll their own when the product becomes generally available next year.' I would also hope the default sa/password will no longer be there."

3 of 248 comments (clear)

  1. Re:MS SQL Server 2005 Adds Security Features. by rtaylor · · Score: 0, Flamebait

    Not to mention that the decryption key will probably be on an insecure web server.

    Anyway, if you want PostgreSQL to use encrypted storage, use an encrypted filesystem.

    --
    Rod Taylor
  2. Re:What's the threat model, and other questions by k12linux · · Score: 0, Flamebait

    I just hope they keep a "backdoor" key that can decrypt the data if my key is lost.. and more importantly can give the FBI, NSA, etc. access to my data if they need it and I'm unavailable to give them access.

  3. Re:Wow! This is +5 Insightful!! by gnuman99 · · Score: 1, Flamebait
    MS was hacked two days ago - see slashdot.

    Everyone will get hacked, be it MS or Debian.

    BTW, Debian was hacked due to a local exploit and a sniffed password. MS was probably cracked remotely, unless you can actually log into their web servers remotely :)

    So there. MS is insecure, Debian is insecure, OpenBSD is insecure (see CVS holes), OSX is insecure, etc...... Yeap, most software is crap. That's why Linux has things like grsecurity.net, second line of defence. I don't know such things even exist for MS OS.