Comments on: “hacking” with postgresql http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/ Tue, 16 Mar 2010 21:16:14 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: amira http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-27069 amira Mon, 01 Dec 2008 16:21:28 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-27069 Hello, for me i have the same problem as you, i export my resource from the database with the same size but when i want to read the file which is a image tiff i can't he send an error. so i need to browse my TIFF files in the web and i don't know how to do that. and if any one have resolved this problem send me a replay and thanks for ur help. Hello,
for me i have the same problem as you, i export my resource from the database with the same size but when i want to read the file which is a image tiff i can’t he send an error. so i need to browse my TIFF files in the web and i don’t know how to do that.
and if any one have resolved this problem send me a replay and thanks for ur help.

]]> By: depesz http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-25011 depesz Mon, 11 Feb 2008 08:33:36 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-25011 @Assid: we had a problem at work with not really good administered remote machine, where we had postgresql super-user, and nothing else. and the admin of the machine was not really responsive. @Assid:
we had a problem at work with not really good administered remote machine, where we had postgresql super-user, and nothing else. and the admin of the machine was not really responsive.

]]> By: Assid http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-25009 Assid Mon, 11 Feb 2008 08:11:00 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-25009 Absolutely brilliant! Well done! How did you even think of it!? Absolutely brilliant! Well done! How did you even think of it!?

]]> By: </depesz> » Blog Archive » securing your postgresql database http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19578 </depesz> » Blog Archive » securing your postgresql database Sat, 18 Aug 2007 21:58:00 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19578 [...] some time ago i wrote about how to “hack” system with postgresql. today i’ll write more about how to [...] [...] some time ago i wrote about how to “hack” system with postgresql. today i’ll write more about how to [...]

]]> By: Krzysztof Wilczynski http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19422 Krzysztof Wilczynski Wed, 15 Aug 2007 20:51:11 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19422 Simply excellent! Truly amazing! For sure worth reading :-) Well done mate. Simply excellent! Truly amazing! For sure worth reading :-) Well done mate.

]]> By: David Fetter http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19351 David Fetter Mon, 13 Aug 2007 18:15:50 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19351 While it's well-known that the database super-user can destroy databases, scribble on the file system, etc., it's better, as you have done, to give specific examples of what a hostile super-user can do. Kudos! While it’s well-known that the database super-user can destroy databases, scribble on the file system, etc., it’s better, as you have done, to give specific examples of what a hostile super-user can do.

Kudos!

]]> By: depesz http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19349 depesz Mon, 13 Aug 2007 16:54:40 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19349 @Vincent de Phily: not really - \o will show you contents of your *local* drive (drive at the machine you have your psql running). and the whole point of the article was to do it on remote machine. @Vincent de Phily:
not really – \o will show you contents of your *local* drive (drive at the machine you have your psql running).
and the whole point of the article was to do it on remote machine.

]]> By: Vincent de Phily http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19348 Vincent de Phily Mon, 13 Aug 2007 15:26:17 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19348 Much easyer way to get a directory listing : type "\o " and use command-line completion ([tab] key). Make sure you don't press [enter] here, unless you actually want to write to that file :p Much easyer way to get a directory listing : type “\o ” and use command-line completion ([tab] key).

Make sure you don’t press [enter] here, unless you actually want to write to that file :p

]]> By: Reuven http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19337 Reuven Mon, 13 Aug 2007 07:35:20 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19337 really enjoyed really enjoyed

]]> By: Amos http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19331 Amos Mon, 13 Aug 2007 02:42:18 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19331 Well done! "Full disclosure" means just what you did here - if it's possible out there you can assume that the chances the bad guys know about it are higher, and therefore making the white-hats aware of such options is paramount to enhancing network security. Besides - it's a cool trick. Well done!

“Full disclosure” means just what you did here – if it’s possible out there you can assume that the chances the bad guys know about it are higher, and therefore making the white-hats aware of such options is paramount to enhancing network security.

Besides – it’s a cool trick.

]]> By: vermin http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19323 vermin Sun, 12 Aug 2007 21:28:34 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19323 nice. really nice, though it reminds me to run all of my deamons chrooted :) nice. really nice, though it reminds me to run all of my deamons chrooted :)

]]> By: drixter http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/comment-page-1/#comment-19321 drixter Sun, 12 Aug 2007 20:23:12 +0000 http://www.depesz.com/index.php/2007/08/12/hacking-with-postgresql/#comment-19321 Amazing, Really. Amazing, Really.

]]>