Can data be stolen by server owoners?

Discussion in 'Site & Server Administration' started by dura_killer, Oct 21, 2008.

  1. #1
    Do the server owners has direct access to data on servers and if the website is doing well can it be stolen by the server owner or all data is encrypted in MySQL servers?
     
    dura_killer, Oct 21, 2008 IP
  2. AviAtriX

    AviAtriX Peon

    Messages:
    67
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Yep .. the server owners can do whatever they want with the data .. if they want they can sell their members e-mails to someone who will send you spam .. and you wont even find about it :) so be careful in what sites are you registering :)
     
    AviAtriX, Oct 21, 2008 IP
  3. proinet

    proinet Peon

    Messages:
    82
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #3
    The server owners, or anyone who has direct root access to the server, can view or copy anything on the server.

    Anything on a server can be read by someone else - that's why it is important to take security precautions to encrypt anything you don't want compromised.
     
    proinet, Oct 21, 2008 IP
  4. kind_of_the_cash

    kind_of_the_cash Active Member

    Messages:
    852
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    85
    #4
    Yes why not server owner can do any thing for your web site , files , database or any thing without domain
     
    kind_of_the_cash, Oct 21, 2008 IP
  5. dura_killer

    dura_killer Peon

    Messages:
    684
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #5
    What after a domain is attached to my website, will server owner be restricted?And how do I encrypt data on server so that server owners don't get access to it and data is accessible when my website viewed through web browser .
     
    dura_killer, Oct 21, 2008 IP
  6. skolor

    skolor Peon

    Messages:
    15
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #6
    Its almost impossible. In order to encrypt something, you have to be able to decrypt it. And if its possible to see it in a web browser, whoever is using the web browser must be able to decrypt it to see it.

    The only possible way of encrypting the data is if everyone who visits the site supplies a password, and even then that is fairly easy to break.
     
    skolor, Oct 21, 2008 IP
  7. kiamori

    kiamori Peon

    Messages:
    20
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Yes - anything that is in non encrypted format, ie.. text(html/php/asp/.net/etc), programs, photo, etc.
    and
    No - if the data is encrypted and placed in a database then even the server owners should not be able to get at any. This of course is based on the encryption methods being used.

    for instance you can build a module in asp.net compiled to a .dll which would access the database and decrypt the files needed to display to the browsers based on authentication. Server owners would not be able to get this data unless it was poorly encrypted in it's ms sql database.
     
    kiamori, Oct 21, 2008 IP
  8. mdvaldosta

    mdvaldosta Peon

    Messages:
    4,079
    Likes Received:
    362
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Data cannot legally be taken, copied, or used for their own use. It's gonna be a non-issue if you're hosting with any reputable hosting company. If you're data is that sensitive maybe you should get your own server and stick it on a rack somewhere.
     
    mdvaldosta, Oct 21, 2008 IP
  9. JPC-NickO

    JPC-NickO Guest

    Messages:
    69
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #9
    You would still have to trust the data-center technicians not to open up the server as well.

    What type of data are you storing?

    If for example you are storing credit card information you could store it in a write-only manner using public key encryption. You could then do the actual processing off-site in a trusted location.
     
    JPC-NickO, Oct 21, 2008 IP
  10. stmiki

    stmiki Peon

    Messages:
    523
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    0
    #10
    The answer is yes, but there are tons of precautions you can take to avoid this.

    The first being make sure you go with a reliable hosting provider that has an established Terms of Service and Privacy Policy. These will usually legally guard you from them peeking into your server but anything is possible.

    Second - There are actually federal guidelines if you are a growing online business which stores credit card numbers and other private financial information which you have to abide by, otherwise your site would be considered illegal.

    Third - A lot of companies store private information in networks not directly connected to the internet, instead they are locally connected to a PC which transmits the information to the local network for processing and encrypted storage. This can be done hundreds of ways through secure API's and such.
     
    stmiki, Oct 22, 2008 IP