Re: [sqlite] Strategies for protecting sql queries

2011-08-29 Thread Simon Slavin
On 30 Aug 2011, at 2:59am, Teg wrote: > PI> If someone was ambitious enough they could attach a debugger to your > PI> application, extract key used to decrypt the database and obtain all > PI> the sensitive information you have. So if you really want to protect > PI> your database against those

Re: [sqlite] Strategies for protecting sql queries

2011-08-29 Thread Teg
PI> If someone was ambitious enough they could attach a debugger to your PI> application, extract key used to decrypt the database and obtain all PI> the sensitive information you have. So if you really want to protect PI> your database against those who is able to attach a debugger you PI> should

Re: [sqlite] Strategies for protecting sql queries

2011-08-29 Thread Simon Slavin
On 29 Aug 2011, at 6:19pm, Jonathon wrote: > I am using a sqlite database to store/retrieve sensitive information. > I am currently encrypting the database to secure the actual data, If you are merely encrypting individual field entries that's not so secure. If you are using a file structure w

Re: [sqlite] Strategies for protecting sql queries

2011-08-29 Thread Pavel Ivanov
> I know > that some databases have encrypted stored procedures.  Does sqlite > have something similar? SQLite doesn't have any kind of stored procedures. > if someone > was ambitious enough, they could just attach a debugger to my process > and see the plain strings. If someone was ambitious en

[sqlite] New server now running

2011-08-29 Thread Richard Hipp
Somehow (I know not how) the sqlite.org server got listed as a spam source at spamhaus.org. This caused all kinds of email problems. We got delisted once, but then got relisted again. I don't *think* we picked up a trojan on the server. There was certainly no evidence of that. But just to be s

[sqlite] Strategies for protecting sql queries

2011-08-29 Thread Jonathon
Hello, I am using a sqlite database to store/retrieve sensitive information. I am currently encrypting the database to secure the actual data, but I am still concerned about my actual sql statements. The sql statements themselves are left in plaintext in memory so if someone was ambitious enough,

[sqlite] Mailing list test

2011-08-29 Thread Richard Hipp
We're having mail server issues at sqlite.org. This is a test message. Sorry for the noise. -- D. Richard Hipp d...@sqlite.org ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Re: [sqlite] writing data in wrong table

2011-08-29 Thread Igor Tandetnik
Thorsten Kersting wrote: > i have one database, with three tables. My programm (c++) tries to > create the tables every time it writes into them, but that shouldnt do > any harm. > the problem is now, that i find data from one table written into another > table. With all due respect, I find it di

Re: [sqlite] Custom Collation comparing only firt character?

2011-08-29 Thread Igor Tandetnik
Jean-Denis MUYS wrote: > int collationAnyCIAI(void *arg1, int str1Length, const void *str1, int > str2Length, const void *str2) { > > But maybe you have good reasons to ignore the Apple-provided collations. In > that case, I still don't get why you don't work > directly on the Unicode strings. Y

[sqlite] writing data in wrong table

2011-08-29 Thread Thorsten Kersting
i have one database, with three tables. My programm (c++) tries to create the tables every time it writes into them, but that shouldnt do any harm. the problem is now, that i find data from one table written into another table. i start my programm several times at the same time, but if i unders

Re: [sqlite] Custom Collation comparing only firt character?

2011-08-29 Thread Jean-Denis MUYS
On 25 août 2011, at 07:58, Roberto Colnaghi wrote: int collationAnyCIAI(void *arg1, int str1Length, const void *str1, int str2Length, const void *str2) { NSString *strA = [NSString hexStringWithData:str1 ofLength:1]; NSString *strB = [NSString hexStringWithData:str2 ofLength:1]; int striA; sscan