Postgres Vision 2022

Extensibility is a key differentiator and flagship capability of PostgreSQL, contributing to the broad community and rise in popularity as the world's most advanced open source relational database. However, with great power comes great responsibility. Unfortunately, that responsibility seems to be misunderstood more often than not, leading to potential exploits and security compromises.

In this talk, we'll discuss what happens when you install extensions, how that can present a security risk if not done properly, and how to better analyze extension vulnerabilities in advance. Specifically, we'll demonstrate three common security exploits and how to use pgspot, a new open-source tool, to examine the extensions you are creating and using on a regular basis.