Hardening MySQL: MySQL Security Basics - MySQL security Tutorial
summary
Argues that compromise is inevitable and emphasizes damage limitation by isolating the DB, removing unnecessary packages (no Samba, BluetoothD), and fixing file perms (no 777). Demonstrates MySQL specifics: use sha256_password plugin in 5.6+, require SSL (connection pooling cuts SSL overhead ~90%), avoid ALL/GRANT OPTION and SUPER for apps. Shows attacks: KVM same-page merging leaks keys, captured hashes cracked in 1.387s for double SHA‑1, and a malicious HID that opens a terminal and drops a reverse shell works in <10 ms.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:19Who am I
- 0:47KublerRoss Model
- 1:38Three Letter Agencies
- 2:05A Solid Foundation
- 4:56Access Control Lists
- 6:18IDs vs IPS
- 6:36Attack Surface
- 10:17Selective Grants
- 11:02Authentication handshake
- 12:25Strong passwords
- 13:10Secure password
- 13:24Require SSL
- 14:33Training your employees
- 15:43More acronyms
- 18:01TLDR
related talks
41mState of MySQL Security in 2021
22mAn Overview of Security Features in MySQL 5.7
55mDip Your Toes in the Sea of Security
01h 01mSecurity: From basic principles to PHP specifics
38mRunning MySQL & MariaDB Server securely in 2019
44mMySQL Administration 101
15mMySQL for System Administrators
10mIntroduction to web security