{"id":2941,"date":"2014-06-11T01:32:24","date_gmt":"2014-06-11T06:32:24","guid":{"rendered":"http:\/\/www.bytebot.net\/blog\/?p=2941"},"modified":"2014-06-11T01:32:24","modified_gmt":"2014-06-11T06:32:24","slug":"on-diskblock-level-encryption-for-mariadb","status":"publish","type":"post","link":"https:\/\/www.bytebot.net\/blog\/archives\/2014\/06\/11\/on-diskblock-level-encryption-for-mariadb","title":{"rendered":"On-disk\/block-level encryption for MariaDB"},"content":{"rendered":"<p>I don\u2019t normally quote The Register, but I was clearing tabs and found this article:\u00a0<a href=\"http:\/\/www.theregister.co.uk\/2014\/05\/21\/got_privileged_users_three_hundred_and_fifty_dbas_just_stare_blankly\/\">350 DBAs stare blankly when reminded super-users can pinch data<\/a>. It is an interesting read, telling you that there are many Snowden\u2019s in waiting, possibly even in your organisation.\u00a0<\/p>\n<p>From a MariaDB standpoint, you probably already <a href=\"http:\/\/monty-says.blogspot.com\/2014\/05\/for-your-eyes-only-or-adding-better.html\">read<\/a> that column level encryption as well as block level encryption for some storage engines are likely to come to MariaBD 10.1 via a solution by <a href=\"http:\/\/eperi.de\/en\/problems-we-solve\/database-encryption\/\">Eperi<\/a>. However with some recent breaking news, Google is also likely to do this &#8211; see this thread about\u00a0<a href=\"https:\/\/lists.launchpad.net\/maria-discuss\/msg01668.html\">MariaDB encryption<\/a> on maria-discuss.\u00a0<\/p>\n<p>Google has already developed on-disk\/block-level encryption for InnoDB, Aria (for temporary tables), binary logs and temporary files. The code isn\u2019t published yet, but will likely happen soon, so clear benefits of open source development principles.\u00a0<\/p>\n<p>Elsewhere, if you\u2019re trying to ensure good policies for users, don\u2019t forget to start with the <a href=\"https:\/\/mariadb.com\/kb\/en\/about-the-mariadb-audit-plugin\/\">audit plugin<\/a>\u00a0and <a href=\"https:\/\/mariadb.com\/kb\/en\/roles\/\">roles<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I don\u2019t normally quote The Register, but I was clearing tabs and found this article:\u00a0350 DBAs stare blankly when reminded super-users can pinch data. It is an interesting read, telling you that there are many Snowden\u2019s in waiting, possibly even in your organisation.\u00a0 From a MariaDB standpoint, you probably already read that column level encryption [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1064,23],"tags":[1673,68],"class_list":["post-2941","post","type-post","status-publish","format-standard","hentry","category-mariadb-databases","category-mysql","tag-encryption","tag-security"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p4vJD-Lr","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/comments?post=2941"}],"version-history":[{"count":1,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941\/revisions"}],"predecessor-version":[{"id":2942,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/posts\/2941\/revisions\/2942"}],"wp:attachment":[{"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/media?parent=2941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/categories?post=2941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bytebot.net\/blog\/wp-json\/wp\/v2\/tags?post=2941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}