Can my host see my database?

[Croniclex]

I have a small business and i have a few thousand users. Anyone that can get his hands on my database would be having a pot of gold if it were to be used for malicious use despite some reasons. I currently use an offshore host. Can the host admin just steal my sql database? Yes it is encrypted but it's not like decrypting with hashcat is very difficult.

Another example, you know those top forums that everyone wants to get his hands on their dbs. Hackforums.net, Sythe.org etc.....
These website's databases are worth THOUSANDS if not millions.
Can their webhosting providers steal their databases? Cause if i'm the admin of a large hosting provider with the ability to peek on their db i know i would. Any safe way of protecting your info?

 

[blackonator]

I have a small business and i have a few thousand users. Anyone that can get his hands on my database would be having a pot of gold if it were to be used for malicious use despite some reasons. I currently use an offshore host. Can the host admin just steal my sql database? Yes it is decrypted but it's not like decrypting with hashcat is very difficult.

Another example, you know those top forums that everyone wants to get his hands on their dbs. Hackforums.net, Sythe.org etc.....
These website's databases are worth THOUSANDS if not millions.
Can their webhosting providers steal their databases? Cause if i'm the admin of a large hosting provider with the ability to peek on their db i know i would. Any safe way of protecting your info?

I'd buy a dedicated box and host your self, keeps everyone out of your account then, no one but you will get access.. otherwise -- if it's shared then yes, then yes

 

[fatboy]

If you are buying ANY kind of hosting, shared, reseller, VPS or dedicated then your host can read everything thats on the box. The only way you will have more luck is building your own server and then colocating the box in a DC. However, once you leave the server they could get local access to it......

If you are that paranoid, host it at your house - however be prepared for big electric bills, your ISP bitching at you, customers complaining at slow responses. Then you have the scenario of if your ISP goes down, you have an electricity cut etc etc.

99.9% of hosts will not snoop......however, there are a few hosts I wouldn't trust with a barge pole

 

[NiteCobain]

I know that if you rely on a company they can access what ever they want.

 

[praetserge]

I always thought they could access your db even if it's on dedicated or vps (my thinking is that they need to be able to log in if you need their help)?
It's a very good question from OP, and I'm eager to hear from somebody who's more technical them me...

 

[Croniclex]

The only way you will have more luck is building your own server and then colocating the box in a DC. However, once you leave the server they could get local access to it......

Thanks for the info, can you briefly explain this sentence i just quoted? I'm an armature when it comes to web hosting, sorry.
Are you talking about buying and hosting a physical server myself at an apartment for example? What is a DC? Thanks.

 

[fatboy]

I always thought they could access your db even if it's on dedicated or vps (my thinking is that they need to be able to log in if you need their help)?
It's a very good question from OP, and I'm eager to hear from somebody who's more technical them me...

Depending on the virtualisation used, reading the content of any VPS ranges from easy to about 10 minutes work. Dedicated, as long as they have local access, they can boot into single user mode and have a crack (think thats right, its how I have changed root passwords after I forget them anyway )

 

[fatboy]

Thanks for the info, can you briefly explain this sentence i just quoted? I'm an armature when it comes to web hosting, sorry.
Are you talking about buying and hosting a physical server myself at an apartment for example? What is a DC? Thanks.

Yup, build your own server and then colocate it (buy rack space from a datacentre (DC) and plug it in to their electric / internet connections.

 

[somedevil]

99.9% of hosts will not snoop......however, there are a few hosts I wouldn't trust with a barge pole

Like who for instance.. ?

 

[BigMoneyyy]

They can see everything. Take a dedicated server with a trusted company like digitalocean, rackspace or build your own datacenter

 

[fatboy]

Like who for instance.. ?

The only host (or group of hosts) I wouldn't trust do not advertise on BHW. Won't put their name as they thrive off any publicity by the looks of it!

 

[MikeTO2]

yes they can do

 

[SharkServers]

A live CD is enough to get to the data - no cracking is needed these days. However, a host should only access data of their clients if asked for help by that client, and the task includes accessing that data. In any other way, it's called spying and it's wrong thing to do.

Dedicated, as long as they have local access, they can boot into single user mode and have a crack (think thats right, its how I have changed root passwords after I forget them anyway )

 

[HostSailor]

Yes they do better get a dedicated server and do not trust shared hosting.