Re: Proposition: Attach a comment to each connection - Justin Farnsworth - com.mysql.lists.mysql

25 messages in com.mysql.lists.mysqlRe: Proposition: Attach a comment to ...

From	Sent On	Attachments
karel pitra	02 Jul 2001 07:59
BAUMEISTER Alexandre	02 Jul 2001 08:38
D'Arcy Rittich	02 Jul 2001 10:42
Siomara Pantarotto	02 Jul 2001 10:52
D'Arcy Rittich	02 Jul 2001 11:07
Alexandre BAUMEISTER	04 Jul 2001 14:59
Werner Stuerenburg	04 Jul 2001 20:05
Werner Stuerenburg	04 Jul 2001 20:52
Jaime Teng	04 Jul 2001 21:09
Jeremy Zawodny	04 Jul 2001 21:20
Chris Bolt	04 Jul 2001 22:12
BAUMEISTER Alexandre	05 Jul 2001 00:31
Miguel Angel Solórzano	05 Jul 2001 00:48
BAUMEISTER Alexandre	05 Jul 2001 01:09
BAUMEISTER Alexandre	05 Jul 2001 02:38
Justin Farnsworth	05 Jul 2001 02:56
Ansgar Becker	05 Jul 2001 03:04
Justin Farnsworth	05 Jul 2001 03:42
Scott Hess	05 Jul 2001 07:37
BAUMEISTER Alexandre	05 Jul 2001 09:39
BAUMEISTER Alexandre	05 Jul 2001 09:45
BAUMEISTER Alexandre	05 Jul 2001 09:49
Justin Farnsworth	05 Jul 2001 11:13
Werner Stuerenburg	06 Jul 2001 14:43
Werner Stuerenburg	06 Jul 2001 14:47

Subject:	Re: Proposition: Attach a comment to each connection
From:	Justin Farnsworth (je...@eyeintegrated.com)
Date:	07/05/2001 11:13:12 AM
List:	com.mysql.lists.mysql

BAUMEISTER Alexandre wrote:

Bonjour Justin,

JF> I don't know why I got interested in this thread...

More important (or less), why are you so negative ?

Je ne suis pas contre. I just haven't felt the need for this, but after reading your scenario, I can't understand why. Email obscures a lot of preconceptions of the writer.

Hope this is more clear to you now.

And, it is. I can see the utility of this functionality if I was tracing a suspect that was trying to get, as an example, credit card numbers out of our database BY NOT GOING THROUGH OUR CLIENTS.

However, it would not help at all if the attacker was sophisticated, because he ain't gonna write in any comments. Without thinking too much, I can see the utility of knowing which of YOUR ten servers was going bonkers, from which of, say, YOUR 250 web sites using the ten MySQL servers.

If I had felt this need, I probably would have just added another field to the schema of a "sensitive" table, and had my apps write in a comment, like, for a shopping cart, "The guy using this credit card has IP so-and-so, and his user agent is so-and-so and the DNS resolves to 12345.nasty.net." I just would not have thought about your idea.

Et alors, bonne chance with this request....

_jef