The piece uses the recent Hugging Face security incident as a starting point for a broader critique of software architecture. The author traces the design of the file system back to the era of punched cards and reel-to-reel tape, noting that the term 'file' comes from physical filing cabinets used before computers existed. Because operating systems were built to run programs rather than applications, any access at the OS level inevitably opens a path to the underlying data stored on disk.
The author revives a roughly 35-year-old concept called the 'thick database,' in which all application logic and both structured and unstructured data live entirely inside the database. In this model, data can only be reached by passing through the database's own logic layer, which narrows the attack surface down to a single point: the DBA credentials.
The market instead adopted n-tier architecture, which the author argues re-exposes data to OS-level compromise, since file-system and operating-system access can bypass application logic entirely. The core argument: real security requires forcing every data access through audited, controlled logic rather than leaving data reachable through the file system, and the thick-database model achieves that in a way n-tier setups do not.




Comments
No comments yet — be the first.
Open the discussion
No account or password needed — just enter your e-mail and we’ll send you a one-time sign-in link. First time here? You’re set up automatically.
Your rating will be applied automatically after you sign in.
Check your inbox
We’ve sent a sign-in link to …. Open it on this device — this tab will sign you in automatically.
Nothing arrived? Check your spam folder — and mark the mail as "Not spam" so it lands in your inbox next time.