1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Can my host see my database?

Discussion in 'Web Hosting' started by Croniclex, Sep 26, 2014.

  1. Croniclex

    Croniclex Newbie

    Joined:
    Mar 23, 2014
    Messages:
    19
    Likes Received:
    1
    I have a small business and i have a few thousand users. Anyone that can get his hands on my database would be having a pot of gold if it were to be used for malicious use despite some reasons. I currently use an offshore host. Can the host admin just steal my sql database? Yes it is encrypted but it's not like decrypting with hashcat is very difficult.

    Another example, you know those top forums that everyone wants to get his hands on their dbs. Hackforums.net, Sythe.org etc.....
    These website's databases are worth THOUSANDS if not millions.
    Can their webhosting providers steal their databases? Cause if i'm the admin of a large hosting provider with the ability to peek on their db i know i would. Any safe way of protecting your info?
     
    Last edited: Sep 26, 2014
  2. blackonator

    blackonator Junior Member

    Joined:
    Dec 27, 2012
    Messages:
    130
    Likes Received:
    16
    I'd buy a dedicated box and host your self, keeps everyone out of your account then, no one but you will get access.. otherwise -- if it's shared then yes, then yes
     
  3. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    If you are buying ANY kind of hosting, shared, reseller, VPS or dedicated then your host can read everything thats on the box. The only way you will have more luck is building your own server and then colocating the box in a DC. However, once you leave the server they could get local access to it......

    If you are that paranoid, host it at your house - however be prepared for big electric bills, your ISP bitching at you, customers complaining at slow responses. Then you have the scenario of if your ISP goes down, you have an electricity cut etc etc.

    99.9% of hosts will not snoop......however, there are a few hosts I wouldn't trust with a barge pole :D
     
    • Thanks Thanks x 2
  4. Sandr0G

    Sandr0G Junior Member

    Joined:
    Sep 8, 2013
    Messages:
    141
    Likes Received:
    52
    Location:
    Europe
    I know that if you rely on a company they can access what ever they want.
     
  5. praetserge

    praetserge Power Member

    Joined:
    Apr 4, 2014
    Messages:
    643
    Likes Received:
    167
    I always thought they could access your db even if it's on dedicated or vps (my thinking is that they need to be able to log in if you need their help)?
    It's a very good question from OP, and I'm eager to hear from somebody who's more technical them me...
     
  6. Croniclex

    Croniclex Newbie

    Joined:
    Mar 23, 2014
    Messages:
    19
    Likes Received:
    1
    Thanks for the info, can you briefly explain this sentence i just quoted? I'm an armature when it comes to web hosting, sorry.
    Are you talking about buying and hosting a physical server myself at an apartment for example? What is a DC? Thanks.
     
  7. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    Depending on the virtualisation used, reading the content of any VPS ranges from easy to about 10 minutes work. Dedicated, as long as they have local access, they can boot into single user mode and have a crack (think thats right, its how I have changed root passwords after I forget them anyway :))
     
  8. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home

    Yup, build your own server and then colocate it (buy rack space from a datacentre (DC) and plug it in to their electric / internet connections.
     
  9. somedevil

    somedevil Jr. VIP Jr. VIP

    Joined:
    Sep 9, 2009
    Messages:
    1,012
    Likes Received:
    493
    Location:
    Dark side of the moon..
    Home Page:
    Like who for instance.. ?
     
  10. BigMoneyyy

    BigMoneyyy Power Member

    Joined:
    Feb 27, 2014
    Messages:
    644
    Likes Received:
    140
    Occupation:
    Internet Marketing
    Location:
    BHW
    They can see everything. Take a dedicated server with a trusted company like digitalocean, rackspace or build your own datacenter ;)
     
  11. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    The only host (or group of hosts) I wouldn't trust do not advertise on BHW. Won't put their name as they thrive off any publicity by the looks of it!
     
  12. BeanDH92

    BeanDH92 Regular Member

    Joined:
    Nov 24, 2013
    Messages:
    243
    Likes Received:
    32
    Occupation:
    Web developer
    yes they can do
     
  13. SharkServers

    SharkServers Regular Member

    Joined:
    Jun 29, 2014
    Messages:
    380
    Likes Received:
    181
    Occupation:
    Web Hosting
    Location:
    DMCA? Pff! www.SuckMyBallsDM.CA
    Home Page:
    A live CD is enough to get to the data - no cracking is needed these days. However, a host should only access data of their clients if asked for help by that client, and the task includes accessing that data. In any other way, it's called spying and it's wrong thing to do.

     
  14. HostSailor

    HostSailor Junior Member

    Joined:
    Jul 5, 2014
    Messages:
    107
    Likes Received:
    4
    Yes they do better get a dedicated server and do not trust shared hosting.