On Wed, 2023-11-08 at 05:31 -0700, David G. Johnston wrote:
> On Wednesday, November 8, 2023, Laurenz Albe <laurenz.albe@cybertec.at> wrote:
> > When people ask my "why?", I tend to answer "why not?". It is not a security
> > problem, in my opinion. Every user is allowed to know that I have a table
> > "purchase" with a column "credit_card_nr". As long as the permissions are set
> > correctly, that is no problem. Any attempt to hide that information is at best
> > "security by obscurity".
>
> The typical answer is some variant of trade secrets. Though wanting to store
> private info in a comment has some merit too.
Don't keep your trade secrets in database identifiers or database function code.
But if somebody is nervous about that, they can have their own database.
Why share a database with users you don't trust?
Yours,
Laurenz Albe
