MySQL Shaving Detection Softwares? - GoFuckYourself.com - Adult Webmaster Forum

X

KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#1

MySQL Shaving Detection Softwares?

05-25-2004, 08:32 AM

Since Search is down.....

Can anyone list me a few mysql shaving-detection softwares out there?

I don't actually need it to check if sponsors are shaving, but I may have a use for it in checking whether employees change any mysql data in sensitive tables...

Thx
Tags: None
Basic_man

Programming King Pin

Join Date: Oct 2003

Posts: 27360
Share

Post
#2

05-25-2004, 08:35 AM

mmm, I don't know any, lets try Google.com!

UUGallery Builder - automated photo/video gallery plugin for Wordpress!
Stop looking! Checkout Naked Hosting, online since 1999 !
Comment
KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#3

05-25-2004, 08:38 AM

Originally posted by Basic_man
mmm, I don't know any, lets try Google.com!

I keep coming up with sites about women shaving hehe
Comment
Trafficbrokercom

Confirmed User

Join Date: Dec 2002

Posts: 542
Share

Post
#4

05-25-2004, 08:39 AM

never heard of a software like this.

get a cheap slave and replicate the master db onto it.

for your purpose it could be the cheapest server available with just enough hd space

you should be the only one knowing the password to access the server.

install cronjobs that create frequent dumps of the db on this slave and you are on a very safe side.
Comment
KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#5

05-25-2004, 08:58 AM

Originally posted by Trafficbrokercom
never heard of a software like this.

get a cheap slave and replicate the master db onto it.

for your purpose it could be the cheapest server available with just enough hd space

you should be the only one knowing the password to access the server.

install cronjobs that create frequent dumps of the db on this slave and you are on a very safe side.

Ok I see your idea, like a hidden backup server. We already have 9 DB servers using native mysql replication, one of them is the backup server...so we could restrict access to it.

What though, for instance, if my programmer changes some stats in accounts of our affiliate program, right before the payout script would run? The backup server solution won't help me out ;/
Comment
Trafficbrokercom

Confirmed User

Join Date: Dec 2002

Posts: 542
Share

Post
#6

05-25-2004, 09:14 AM

you are right .. but this would be a hassle for the admin .. he would need to set it back every time ..

have the payout cronjob starting at 5 am .. and the slave creates a dump at 4.59 am .. this would be the only way to cover the risk of temporary manipulation ..

another solution would be a monitoring script that creates a temp database that creates a snapshot x hours before payout and compares it with the table after payout ..

btw, if you use MySql for replication be sure to update to 4.0.20 ..

this bug caused me and many others a shitload of time :

http://bugs.mysql.com/bug.php?id=2886
Comment
VideoJ

Confirmed User

Join Date: Aug 2002

Posts: 750
Share

Post
#7

05-25-2004, 09:25 AM

Here's whree to start http://dev.mysql.com/doc/mysql/en/Binary_log.html It logs all updates to your databases. You can then build an app that validates the databases, for example does the payout match the total signups and were there any changes at the last minute.

Also if you're worried about your programmer, have another independent programmer audit the production code. Programmers can put some crazy stuff in their code if they think no one is looking

Somebody stole my damn signture...
Comment
KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#8

05-25-2004, 09:27 AM

Originally posted by Trafficbrokercom
you are right .. but this would be a hassle for the admin .. he would need to set it back every time ..

have the payout cronjob starting at 5 am .. and the slave creates a dump at 4.59 am .. this would be the only way to cover the risk of temporary manipulation ..

another solution would be a monitoring script that creates a temp database that creates a snapshot x hours before payout and compares it with the table after payout ..

that's possible...currently we don't worry about it as only I and the owner have access, but we know someday we will need to delegate responsibility ot our team...that's why I wanted to checkout how these "detect mysql shaving" softwares worked...

btw, if you use MySql for replication be sure to update to 4.0.20 ..

this bug caused me and many others a shitload of time :

http://bugs.mysql.com/bug.php?id=2886

Thx for the advice, Ive had that error before, but haven't had it in maybe 6 months now....replication been going smooth for us. I always think it's a good idea to upgrade to latest stables though =)

I'm waiting for MySQL's asynchronous replication. We were looking at using EMIC, but with MySQL's announcement we might as well wait for their own version

Last edited by KidCock; 05-25-2004, 09:32 AM.
Comment
JDog

Confirmed User

Join Date: Feb 2003

Posts: 7453
Share

Post
#9

05-25-2004, 09:32 AM

So you have a programmer you don't trust? If you can't trust him, why do you have him onboard?

jDoG

NSCash now powering ReelProfits.com
ALSO FEATURING: NSCash.com :: SoloDollars.com :: ReelProfits.com :: BiminiBucks.com :: VOD
PROGRAMS COMING SOON: Greedy Bucks :: Vengeance Cash
NOW OFFERING OVER 60 SITES
CONTACT :: JAMES SMITH :: CHIEF TECHNOLOGY OFFICER :: ICQ (711385133)
Comment
KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#10

05-25-2004, 09:34 AM

Originally posted by JDog
So you have a programmer you don't trust? If you can't trust him, why do you have him onboard?

jDoG

No as of yet we have no reason to not trust them, but no reason to trust them either.

We re-located to Costa Rica 7 months ago, and our 3 programmers have only been here 3-4 months. They've been working on a local intranet project as their test....

One day they will move to our real projects though ;>
Comment
KidCock

So Fucking Banned

Join Date: May 2003

Posts: 788
Share

Post
#11

05-25-2004, 09:36 AM

Originally posted by VideoJ
Here's whree to start http://dev.mysql.com/doc/mysql/en/Binary_log.html It logs all updates to your databases. You can then build an app that validates the databases, for example does the payout match the total signups and were there any changes at the last minute.

Also if you're worried about your programmer, have another independent programmer audit the production code. Programmers can put some crazy stuff in their code if they think no one is looking

Looking at that URL, thx.

We do have a process that all production code has to go through me, and all production code relating to money/processing goes through myself and my boss. That's been working well for no surprises. However once our staff has access to our production databases, they can change things directly in the DB...
Comment

Previous template Next

Working...