Please join Percona’s Information Security Architect, David Bubsy, as he presents his talk Web Application Security – Why You Should Review Yours on March 14th, 2019 at 6:00 AM PDT (UTC-7) / 9:00 AM EDT (UTC-4).
In this talk, we take a look at the whole stack and I don’t just mean LAMP.
We’ll cover what an attack surface is and some areas you may look to in order to ensure that you can reduce it.
For instance, what’s an attack surface?
Acronym Hell, what do they mean?
…
[Read more]Join Percona Support Engineer, Vinicius Grippa, as he presents his talk Enhancing MySQL Security on Thursday, March 7th, 2019 at 7:00 AM PST (UTC-8) / 10:00 AM EST (UTC-5).
Security is always a challenge when it comes to data. What’s more, regulations like GDPR add a whole new layer on top of it, with rules more and more restrictive to access and manipulate data. Join us in this presentation to check security best practices, as well as traditional and new features available for MySQL including features coming with the new …
[Read more]The latest enhancement in ProxySQL v2.0.0 is the native support of Galera Cluster. No more need to use an external script within the scheduler like explained also in this post of ours.
This document will cover how to take an advantage of the new feature and integrate ProxySQL with Percona XtraDB Cluster to monitor galera node status and read-write split performed by ProxySQL. To illustrate we will use a cluster of 3 nodes, below are the details:
| IP address | Hostname |
|---|---|
172.16.1.112
|
db-node01
|
172.16.1.113
|
db-node02
|
| … |
As I discussed in some of my recent talks at conferences (at the
DOAG for example), MySQL 8 came out with new
features which bring lots of improvements in terms of
security.
“At-Rest” encryption has been existing from some releases by
now:
– InnoDB Tablespace Encryption: by 5.7.11
– Redo and Undo Log Data Encryption: by 8.0.1
Now starting from version 8.0.14, you can also encrypt binary and
relay log files. In this blog post we will see how to configure
that and we will do some tests.
Case 1: Binary log files are not encrypted
Binary log files encryption is disables by default:
mysql> show variables like 'binlog_encryption'; +-------------------+-------+ | Variable_name | Value | +-------------------+-------+ | binlog_encryption | OFF | …[Read more]
As I discussed in some of my recent talks at conferences (at the
DOAG for example), MySQL 8 came out with new
features which bring lots of improvements in terms of
security.
“At-Rest” encryption has been existing from some releases by
now:
– InnoDB Tablespace Encryption: by 5.7.11
– Redo and Undo Log Data Encryption: by 8.0.1
Now starting from version 8.0.14, you can also encrypt binary and
relay log files. In this blog post we will see how to configure
that and we will do some tests.
Case 1: Binary log files are not encrypted
Binary log files encryption is disables by default:
mysql> show variables like 'binlog_encryption'; +-------------------+-------+ | Variable_name | Value | +-------------------+-------+ | binlog_encryption | OFF | …[Read more]
The MariaDB Foundation is pleased to announce the availability of MariaDB 10.3.13, the latest stable release in the MariaDB 10.3 series, as well as MariaDB Connector/C 3.0.9, the latest stable release in the MariaDB Connector/ODBC series. See the release notes and changelogs for details. Download MariaDB 10.3.13 Release Notes Changelog What is MariaDB 10.3? MariaDB […]
The post MariaDB 10.3.13 and MariaDB Connector/C 3.0.9 now available appeared first on MariaDB.org.
Ahead of the PCI move to deprecate the use of ‘early TLS’, we’ve previously taken steps to disable TLSv1.0.
Unfortunately at that time we encountered some issues which led us to rollback these changes. This was to allow users of operating systems that did not – yet – support TLSv1.1 or higher to download Percona packages over TLSv1.0.
Since then, we have been tracking our usage statistics for older operating systems that don’t support TLSv1.1 or higher at https://repo.percona.com. We now receive very few legitimate requests for these downloads.
Consequently, we are ending support for TLSv1.0 on all Percona web properties.
…[Read more]In this post, we’ll cover Percona’s thoughts about the current MySQL community discussion happening around MySQL LOCAL INFILE security issues.
This post is released given the already public discussion of this particular issue, with the exploitation code currently redacted to ensure forks of MySQL client libraries have sufficient time to implement their response strategies.
This post has been updated to now include previously redacted content, in line with responsible disclosure sufficient time has passed to allow forks to update and get those updates out for circulation.
Background
MySQL’s
LOCAL INFILE
feature is fully documented by Oracle MySQL, and there is a legitimate use for the
LOCAL INFILE
feature to upload data to a …
[Read more]The encrypted binary log file format introduced in MySQL version 8.0.14 was designed to allow a “manual” decryption of the file data when the value of the key that encrypted its file password is known.
Each encrypted binary (or relay) log file is composed by an encrypted binary log file header and the encrypted binary log content (the file data).…
Starting in version 8.0.14, MySQL server can encrypt all new binary and relay
log files on disk. In order to do so, you just need to enable
the new binlog_encryption option (and also
ensure that you have a keyring).…
