Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- From: Larry Lindstrom <nobody@xxxxxxxxxxx>
- Date: Wed, 05 Jul 2006 11:35:54 -0700
TC wrote:
pegguru@xxxxxxxxx wrote:
I suspect that the concept is that a user could use separate
passphrases for separate chunks of data.
But that's a guess. We shouldn't design on the basis of guesses!
This clearly illustrates the point that I made to him in my previous
post. We're /guessing/ about his actual requirements, unless & until he
describes what they are.
Thanks again TC:
I'm sensing frustration, and I'm trying to help.
Definitions:
Member - Person who has their information stored
on the database.
User - Person who updates and queries the user
data.
Facility - Club, business, or similar organization
with members and users.
The task:
Store information about club members. This would
be names, addresses, phone numbers, for people and
their family members. In the future I'd like to
be able to store Social
Secure this information while allowing users to
access it.
Some users will access the database on a central
server, others will have the database running on
their laptops.
There is nothing secure about the database. Any
security I write into the program can be
circumvented with a command line SQL query tool.
Threats:
All the usual suspects, you folks know more about
threats than I. One threat will be the theft of a
laptop.
Standards of success:
Provide the members reasonable security. If an
insider gains access to the pass phrase and copies
the data to a CD, and gives that to someone, there
isn't much I can do.
Bad things do happen, bad people do bad things.
When something bad happens to a member because
information entered with this program is
compromised, I'd like to be able to argue that
I provided the tools for a secure system, and
it's not my fault.
Does this describe the system requirements?
What else can I tell you?
I appreciate your advice and your patience.
Thanks
Larry
.
- Follow-Ups:
- References:
- Newbie - Are You Sure That's the Correct Pass Phrase?
- From: Larry Lindstrom
- Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- From: TC
- Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- From: pegguru
- Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- From: TC
- Newbie - Are You Sure That's the Correct Pass Phrase?
- Prev by Date: Re: RSA on long messages
- Next by Date: Re: RSA on long messages
- Previous by thread: Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- Next by thread: Re: Newbie - Are You Sure That's the Correct Pass Phrase?
- Index(es):
Relevant Pages
|