Re^2: Cryptology in the database

[stiller]

I find the idea of not storing sensitive data unless it's absolutely necessary particularly interesting.

It's a very good one.

Unfortunately it's often an uphill batle to get acceptance for not storing a lot of 'nice to have' data that's not really neccesary to keep and that greatly increase the complexity of the application.

Beeing able to conjure som estimates on the cost (not just economic) of adding each table/field sell better with management than just complaining though. Remember to apply π² to your first idea when you think of a number. Add prime time news headlines to the picture when it's security related.

[andreas1234567]

Add prime time news headlines to the picture when it's security related.

Possibly the ugliest example so far is the TJX data breach (45.6M card numbers stolen). Then there's the UK HM Revenue and Customs lost computer disks (25M confidential child benefit details lost). The list grows quickly.