RE: Oracle Step-by-Step Guide feedback

To quote Alan Paller in his email which included the document :

"Thanks for your note.

The attached file has the problem set from the first draft of SANS new publication, Securing Oracle:
Step by Step. If you have expertise in Oracle security and apply it to provide substantive feedback on
the problem set, we'll include you in the next round that finalizes the actions that need to be taken to
eliminate, as much as possible, the problems. The feedback deadline is the 29th of March.

Send your comments here (the SANS Research Office at sansro_at_sans.org).

And thank you!

Alan

Alan Paller
Director of Research
The SANS Institute
paller_at_sans.org"

My reading would be that feedback from experts was welcome. It doesn't say that
feedback was mandatory.

Hemant K Chitale
Principal DBA
Chartered Semiconductor Manufacturing Ltd

John Kanagaraj <john.kanagaraj_at_hds.com> 30/03/2002 06:18 AM Sent by: root_at_fatcity.com

Please respond to ORACLE-L

                                                                                                               
             To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>                                   
             cc: (bcc: CHITALE Hemant Krishnarao/IT/CHRT/ST Group)                                             
             Subject: RE: Oracle Step-by-Step Guide feedback                                                   
                                                                                                               
                                                                                                               
                                                                                                               

List,

SANS is a reputed non-profit organization dedicated to Security issues and I
think Alan Paller is their director. They have done excellent work related to Computer Security and awareness over the last 6 years that I have known them. Understandably, they are senstive about dishing out security-related material to someone who agreed to provide feedback but didn't... I do remember that they requested that only those who agreed to provide feedback participate in the program. I didn't participate because I didn't have time,
so I am not in the know about what was asked. I would re-read the terms on which they sent out the note.

John Kanagaraj

> -----Original Message-----
> From: Koivu, Lisa [mailto:lisa.koivu_at_efairfield.com]
> Sent: Friday, March 29, 2002 9:18 AM
> To: Multiple recipients of list ORACLE-L
> Subject: FW: Oracle Step-by-Step Guide feedback
>
>
> Anyone else get an email like this that sounded kinda threatening?
>
> > -----Original Message-----
> > From: SANS Research Office [SMTP:sansro_at_sans.org]
> > Sent: Friday, March 29, 2002 12:05 PM
> > To: sansro_at_sans.org
> > Subject: Oracle Step-by-Step Guide feedback
> >
> > This is a note to the 167 people who promised to provide
> feedback on the
> > Oracle problem list. First, great thanks to all who have sent
> > feedback. I have read most of the response. They reflect real
> > expertise and thoughtfulness.
> >
> > This project has taken on more meaning because the
> specifications of a
> > "safe" Oracle installation we are producing are now being
> discussed as
> > criteria in Oracle procurements at multiple federal agencies.
> > In other words, we need to do it right the first time. So
> we especially
> > appreciate teh feedback.
> >
> > If you provided substantive feedback on the problem set
> draft, we will
> > also send you the actual draft of the problems and
> solutions. Others
> > will be able to purchase the document later when it is
> published after
> > several rounds of review. We're thinking about a special
> program for the
> > people who made us go to the trouble of sending the draft
> and then did not
> > provide feedback. Because of the holiday weekend, we'll extend the
> > feedback deadline to Thursday April 4.
> >
> > Alan
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Koivu, Lisa
> INET: lisa.koivu_at_efairfield.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: John Kanagaraj
  INET: john.kanagaraj_at_hds.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).





-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: hemantchitale_at_charteredsemi.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).