Off-topic: whenever I see (YC ) in a title I always assume it's a job posting and automatically ignore it. Might be detrimental to label a blog post appear that way.
Plus one
Please comment civilly and substantively, or not at all.
ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
31–38 of 38 posts
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#32CryptDb offers DB querying without having to load certain parts of the db to your local machine, which is the model of operation by zeroDb in its current incarnation. Which is more secure? Does zeroDb use non deterministic encryption?
ZeroDB doesn't use deterministic encryption (neither Hadoop product, nor open source database)
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#33Earlier quoted context omitted.
This is indeed true for our standalone, open source database ( https://github.com/zerodb/zerodb ). However, it is not the case for our Hadoop scheme (nor our future support for structured database). In these cases, there is no round-tripping required. In fact, it's significantly more performant than existing Transparent Data Encryption in Hadoop, from both a latency and key rotation perspective. We'll likely release…
Having worked on a similar product and heard a very similar description of the 'proprietary' method, I'm guessing either security, speed or both are actually compromised.
There are many proprietary methods which are based on deterministic encryption + obfuscating word distribution, that's what most companies do.
We avoid doing that because of questionable security of such method. Also we tend to publish what we do (stay tuned for Hadoop paper :-)
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#34Microsoft offers "Always Encrypted" for Query Processing over encrypted data in SQL Server and SQL Azure : https://msdn.microsoft.com/en-us/library/mt163865.aspx (Disclaimer : Microsoft Employee)
Does Microsoft use deterministic encryption for searchable encryption? I'm sure OPE, Pallier etc. schemes are in use for columns that require those properties
Yes. It's configurable.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#35Hey HN, cofounder of ZeroDB here. Michael (/u/michwill) and I are excited to be a part of YC and happy to answer any questions about the company!
If the consuming application (and thus, keys) exist in the cloud as well, does ZeroDB offer any additional benefit over other encrypted at rest dbs? random ex: https://docs.mongodb.com/manual/core/security-encryption-at-...
I think, you may have the application with a different cloud provider or even in a different geographic location, so that you can keep keys away from the data. In this case you sort of distribute trust.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#36Earlier quoted context omitted.
That's one of the reasons behind the name change from Cadabra to Amazon.com. p.s. if you change it to 0db perhaps you might be listed before any "a" company? Not sure if numbers precede letters in those lists.
0db - that's I was thinking of. Way to fight 0days
0db definitely sounds like an audio brand. I don't recommend it.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#37Off-topic: whenever I see (YC ) in a title I always assume it's a job posting and automatically ignore it. Might be detrimental to label a blog post appear that way.
Better to read it as advertising YC's investments on YC's forum.
You can advertise it without using the exact same format as job listing.
Re: ZeroDB (YC S16) Provides Security for Enterprise Big Data in the Cloud
#38Earlier quoted context omitted.
Better to read it as advertising YC's investments on YC's forum.
You can advertise it without using the exact same format as job listing.
Looked different to me. Those usually don't have comments and other links under the title. Just amount of time since post appeared. Sounds like two of you are doing spot judgments on threads that ignore important info. Your filters are title only instead of title + peripheral info. Prevents the problem you're having.