Forum Overview :: Rants :: Accessing one item at a time

[quote name="Tansin A. Darcos (TDARCOS)"][quote name="Entropy Stew"]I love his insistence on accessing things one at a time. Because it's more secure that way. Because it is. -/ES/-[/quote] Well, look, if the only way you can get to a database is one user record at a time, one screen at a time, you can maybe access a couple hundred records an hour if that. You can't download 5 million records when you can only reach them one at a time. If I'm wrong, explain it to me. If the database is encrypted so that capturing it gets you an unreadable data file, and the only way you can access it is through an app or web application that throttles you to one record at a time, and does something similar to Caltrops - you can't post faster than one message each 35 seconds - this cuts you to viewing two records a minute. Two records a minute means you can read the database through a straw at best, not through a firehose, and then if there's a maximum access rate of perhaps 500 records in a 12-hour period it cuts the exposure window. If you can't get to large volumes of data, you can't steal large volumes of data. It's been pointed out that if ISPs throttled people who try to send lots of mail - most of which are zombie processes - to a maximum of one per second, and perhaps 500 an hour, the usability of botnets drops since they can't spew 5,000 messages a minute. [/quote]