Two Factor Authentication

RdbHost now supports two-factor authentication for login into the RdbHost website.

You can setup RdbHost logins in the Google Authenticor (GA) app in your smart phone, which creates a 'shared secret' between the GA app and RdbHost, and the login process will then require a time-coded number from the Google

Posted on

SSH Keys

The SFTP server on RdbHost now supports the installation of ssh keys for password-free logins.

There is still no shell access (nor ever will be), so you need to use a web interface, linked from the profile page.

You can also turn off password logins for SFTP access altogether, if

Posted on

Rdb2.js

A new version of RdbHost's JavaScript module is out. It is for modern browsers only, expecting to find websockets and promises supported. It will feature-test and load polyfills as required.

The range of features in this version is minimalist compared to the jQuery plugin, but that is temporary and deliberate.

Posted on

SFTP recreated from NULL

We have maintained a special SFTP server for clients to access their own lookup.files table through their choice of SFTP client.

Until recently, that server was implemented with Python and the Paramiko library. It had a significant limitation, in that the SFTP encryption handshake was always done in the

Posted on

Bounty on Cobalt.io Increased

We have had a bounty for demonstrated security weaknesses on Rdbhost.com, for 19 months or so. The bounty program challenges hackers to break or reveal databases on the subject accounts. To date, nobody has claimed the big prize. We have paid modest bounties for various issues, but nobody has

Posted on

PostgreSQL Temp Schema

This is cool, and I just discovered it. It is a Postgresql feature, not an RdbHost feature, but worth sharing. It is quite useful on Rdbhost databases.

There is a temporary schema, called pg_temp, created for each session (as necessary), and destroyed with its contents at the end of

Posted on