Database » $Pete Finnigan's Oracle security weblog

« Expand/Collapse

$Pete Finnigan's Oracle security weblog (10 unread)

October 04, 2008
0:08
Happy Belated 4th Birthday to my blog
» ‎ $Pete Finnigan's Oracle security weblog

Well, it is slightly late BUT I have been blogging about (almost exclusively) Oracle security for 4 years now, the longest running blog dedicated just to Oracle Security . I started this blog on 20th September 2004 and it has....[Read More]

Posted by Pete On 02/10/08 At 09:01 PM
September 30, 2008
3:15
Slides from my Oracle Security Masterclass at White-Hats are available
» ‎ $Pete Finnigan's Oracle security weblog

I have just posted the slides from my talk last Friday at the White-Hats event in London. The Oracle Security Masterclass is based on previous ones but the slides are not exactly the same. The slides are on my Oracle....[Read More]

Posted by Pete On 29/09/08 At 07:39 PM
September 26, 2008
19:37
Oracle Password Cracker written in PL/SQL is available
» ‎ $Pete Finnigan's Oracle security weblog

I have just created a dedicated page for my PL/SQL Oracle database password cracker and also linked to it from the Oracle Security Tools page . The code is available as a zip file at the end of the PL/SQL....[Read More]

Posted by Pete On 25/09/08 At 05:36 PM
19:37
Oracle Security talk available as slides and also video
» ‎ $Pete Finnigan's Oracle security weblog

On Tuesday I did a webinar for Sentrigo on the subject of Oracle Security (of course). This went well and we had quite a good attendance. I started the talk with a ten minute or so demo of hacking an....[Read More]

Posted by Pete On 25/09/08 At 04:13 PM
September 25, 2008
16:48
An update, slides, USA and a masterclass
» ‎ $Pete Finnigan's Oracle security weblog

Well it has been a really busy last few weeks, phew.... I have had litle free time to do anything for myself except work for clients and keep the business running. On one hand thats great, but on the other....[Read More]

Posted by Pete On 23/09/08 At 09:15 PM
September 18, 2008
3:11
Oracle Security webinar with Pete Finnigan
» ‎ $Pete Finnigan's Oracle security weblog

Next week on the 23rd of September at 15:00 UK time I am going to be doing another webinar on Oracle database security with Sentrigo . Here are the details being sent out for the webinar, I would be please....[Read More]

Posted by Pete On 17/09/08 At 08:36 AM
September 16, 2008
22:43
Oracle Security Masterclass slides available
» ‎ $Pete Finnigan's Oracle security weblog

It has been a while since my last blog entry, things have been very busy work wise over the last few weeks, lots of travelling all over the place and lots of work..:-) Last week I was in Reykjavik to....[Read More]

Posted by Pete On 15/09/08 At 09:08 PM
August 30, 2008
9:38
A new Oracle Password cracker that runs inside the database
» ‎ $Pete Finnigan's Oracle security weblog

I wrote an Oracle password cracker completely in PL/SQL some time ago and have been using it on Oracle Database Security audits as a good starting point to test the strength of Oracle database passwords. Of course I will not....[Read More]

Posted by Pete On 29/08/08 At 06:14 PM
August 29, 2008
2:31
Designing application and code to use the minimum privileges
» ‎ $Pete Finnigan's Oracle security weblog

In todays day and age we should all design code and applications to use the minimum privileges necessary, and only those necessary, and even ideally not even those privileges This is what we call in security circles reducing the attack....[Read More]

Posted by Pete On 28/08/08 At 07:52 PM
August 26, 2008
8:30
Another Major UK Data Loss
» ‎ $Pete Finnigan's Oracle security weblog

A few days ago another major data leak occured in the UK. This time involving a UK consultancy called PA Consulting and also the British Home Office. An article Worker suspended over loss of prisoner data "A staff member at....[Read More]

Posted by Pete On 25/08/08 At 10:15 AM

← DBA's notes Ask Tom MOST RECENT ARTICLES →

Database » $Pete Finnigan's Oracle security weblog

Feeds

$Pete Finnigan's Oracle security weblog (10 unread)