Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

Re: Storing Images in SQL Server (2005)

Subject: Re: Storing Images in SQL Server (2005)
Date: Thu, 21 Sep 2006 07:29:48 -0700
On Wed, Sep 20, 2006 at 09:50:17PM -0400, Brian A. Reiter wrote:
I've seen a lot of negatives on storing files as BLOBs in a database in this
thread. I think it's worth looking at the other side of the coin.

{excellent points elided}


Also:

Backing up "the system" is done by backing up the database, all within
transaction contexts. No worries about timing skews where the filesystem
data is backed up separately from the database, and pointers not matching
up because of activity going on during backup time.

It may well be that SQL-backed storage scales better when distributing an
application beyond just one server: it's hard enough to split a database
up among multiple backend servers as it is, but with the SQL-only method
you only have to solve this once. If using the filesystem, you have to
build a parallel system for the image files.

But speaking more generally: I'll trade some amount of speed in order to
get reduced complexity any day of the week; complexity is the enemy of
security and maintainability.

Steve

--- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | steve@unixwiz.net

---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>