Re: Security issue with Oracle 8i

Philip Chee wrote:

> In article <3CCD7201.3369119_at_exesolutions.com> dmorgan_at_exesolutions.com writes:
>
> > Thank you Rick. The solution is brilliant. Primarily because I can't think of a
> > single
> > sysadmin (no disparagement intended) who would care enough to look for a
> > workaround.
> > They would just assume it was the way Oracle worked ... always asking for a
> > password
> > they didn't have.
>
> Um, I'm a unix sysadmin and this wouldn't be enough to stop me.
> Assuming I have the time and energy - I do wish someone would invent
> the 28 hour day especially when deadlines loom.
>
> Philip
>
> ---=====================================================================---
> Philip Chee: Tasek Corporation Berhad, P.O.Box 254, 30908 Ipoh, MALAYSIA
> e-mail: philip_at_aleytys.pc.my Voice:+60.5.291.1011 Fax:+60.5.291.9932
> Guard us from the she-wolf and the wolf, and guard us from the thief,
> oh Night, and so be good for us to pass.
> ... Usenet does not exist, because there is no "U" in "E=mc^2".
> --
> * 20369.45 *

I would really appreciate knowing how you would approach this (in general). And why, having been confronted with a request for a password, you would have any reason to believe a workaround was possible.

Thanks.

Daniel Morgan Received on Tue Apr 30 2002 - 10:50:31 CDT