Return-Path: X-Original-To: apmail-cassandra-user-archive@www.apache.org Delivered-To: apmail-cassandra-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 799CF1805F for ; Fri, 29 Jan 2016 19:10:44 +0000 (UTC) Received: (qmail 46394 invoked by uid 500); 29 Jan 2016 19:10:41 -0000 Delivered-To: apmail-cassandra-user-archive@cassandra.apache.org Received: (qmail 46353 invoked by uid 500); 29 Jan 2016 19:10:41 -0000 Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@cassandra.apache.org Delivered-To: mailing list user@cassandra.apache.org Received: (qmail 46343 invoked by uid 99); 29 Jan 2016 19:10:41 -0000 Received: from Unknown (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 29 Jan 2016 19:10:41 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 6553CC0D25 for ; Fri, 29 Jan 2016 19:10:41 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.879 X-Spam-Level: ** X-Spam-Status: No, score=2.879 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=datastax.com Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id WK7L2vIKQCb8 for ; Fri, 29 Jan 2016 19:10:39 +0000 (UTC) Received: from mail-yk0-f182.google.com (mail-yk0-f182.google.com [209.85.160.182]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id 926D0205F5 for ; Fri, 29 Jan 2016 19:10:39 +0000 (UTC) Received: by mail-yk0-f182.google.com with SMTP id r207so36729426ykd.2 for ; Fri, 29 Jan 2016 11:10:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=datastax.com; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=CSB2W4guNBMe6kARxmkPPADNWvjtI1awz750lzn42es=; b=kseySkxq/3nxKD6PAnveCT8PsQRL5+v2Vz1cy08XRknYKLW7keAV6WEm14Q2dE7bmV lz9A/Atepqfj55tNUPHxn05QHxE3Pgl70xz3yzWNr7zdzkGsm+uOZcDGqzyfZZJBOtcV H7tTGRHxwPHxm88h92ZrGMcOxalliIpKsBuCY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:content-type; bh=CSB2W4guNBMe6kARxmkPPADNWvjtI1awz750lzn42es=; b=f/WnYbThHrt7tNj5svsHgOYZkAtJi2kOLH8/RjVLDGzVVZOek7BQf2IQabwXe6f6Mi 7B/CVMMJc0z7uqgSQi7avXTCg+cjdOjzt5KKvE5wYO2wCn9GpRPutN92HSglZcxRiFcr NaOI9O0ZGSnbRYCVb8kp9D9HeJoCnQy7NgeN50kNsHNoYp6gBkKwpjmJTpTbhMLaCNhn yPxQQWO8f8rV7Kfqi5LW/DmX7BkTpca90IWdwi7il0E+M5wFE83VVb2ZyTvrXdxjezIz vewQYOP38afHa6aPQekTNlO8ui9NayWs+vnSobYzHjLuA5pj622nIt8WvhRqhLzuKkje UABQ== X-Gm-Message-State: AG10YOSdiBJid5/RwhABUYKt4FiRQ40YJjsebbS4DnhEs8M3W1AYS8Br08Al0aYEUpAFLwSPxe0AgZBbMeYbDUQ0 X-Received: by 10.129.70.10 with SMTP id t10mr5938130ywa.284.1454094638744; Fri, 29 Jan 2016 11:10:38 -0800 (PST) MIME-Version: 1.0 Received: by 10.13.251.134 with HTTP; Fri, 29 Jan 2016 11:10:19 -0800 (PST) In-Reply-To: References: From: Alex Popescu Date: Fri, 29 Jan 2016 11:10:19 -0800 Message-ID: Subject: Re: Session timeout To: user Content-Type: multipart/alternative; boundary=001a114d71e869bf81052a7dca69 --001a114d71e869bf81052a7dca69 Content-Type: text/plain; charset=UTF-8 On Fri, Jan 29, 2016 at 8:17 AM, oleg yusim wrote: > Thanks for encouraging me, I kind of grew a bit desperate. I'm security > person, not a Cassandra expert, and doing security assessment of Cassandra > DB, I have to rely on community heavily. I will put together a composed > version of all my previous queries, will title it "Security assessment > questions" and will post it once again. Oleg, I'll apologize in advance if my answer will sound initially harsh. I've been following your questions (mostly because I find them interesting), but I've never jumped to answer any of them as I confess not knowing the purpose of your research/report makes me caution (e.g. are you doing this for your current employer evaluating the future use of the product? are you doing this for an analyst company? are you planning to sell this report? etc. etc). -- Bests, Alex Popescu | @al3xandru Sen. Product Manager @ DataStax --001a114d71e869bf81052a7dca69 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

= On Fri, Jan 29, 2016 at 8:17 AM, oleg yusim <olegyusim@gmail.com&g= t; wrote:
Thanks for encouraging m= e, I kind of grew a bit desperate. I'm security person, not a Cassandra= expert, and doing security assessment of Cassandra DB, I have to rely on c= ommunity heavily. I will put together a composed version of all my previous= queries, will title it "Security assessment questions" and will = post it once again.

Oleg,

I'll apologize in advance if = my answer will sound initially harsh. I've been following your question= s (mostly because I find them interesting), but I've never jumped to an= swer any of them as I confess not knowing the purpose of your research/repo= rt makes me caution (e.g. are you doing this for your current employer eval= uating the future use of the product? are you doing this for an analyst com= pany? are you planning to sell this report? etc. etc).=C2=A0


--
=
Bests,

Alex Popescu |=C2=A0@al3xandru
Sen. Pro= duct Manager @ DataStax

--001a114d71e869bf81052a7dca69--