Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Open Source Oracle?

Re: Open Source Oracle?

From: JEDIDIAH <jedi_at_nomad.mishnet>
Date: Fri, 17 Sep 2004 16:45:14 -0500
Message-ID: <slrnckmn0t.or.jedi@nomad.mishnet>


On 2004-09-14, Howard J. Rogers <hjr_at_dizwell.com> wrote:
> Joel Garry wrote:
>
>> Pete Finnigan <plsql_at_petefinnigan.com> wrote in message
>> news:<nsFlhJBFkrRBRxpB_at_peterfinnigan.demon.co.uk>...
>>> Nice thought Howard,
>>>
>>> It would be very useful for security research as some parts of Oracle I
>>> am sure must be very similar or the same as now and certainly from the
>>> same source tree.
>>>
>>> We would get the TNS protocol, the password algorithm, the C source of
>>> all of the built in SQL and PL/SQL functions, the C source of wrapping
>>> mechanism, a look at the SQL and PL/SQL VM's, compilers, and op codes,
>>> machine code ect.... Just think how many buffer overflows would be found
>>> in security alert #69 if we had access now to the source.
>>
>> Yes, the Open Source ideal is to find this stuff and _fix it._
>> Someone would have to play the Torvalds "Benificent Dictator" role,
>> and I can't see tkyte having enough time to do that :)
>
> Just bear in mind... a forked Oracle is one thing. A freebie unfixed Oracle
> is something else. I'll take both if I can get it. I'll settle for the
> free-with-bugs version if that's all that's on offer.

        Bear in mind, the existence of an "OpenOracle" will not negate the need for enterprise grade support. Companies that now shell out tens of kilobucks per cpu will not simply defect. Even if 3rd party support entities crop up, they will always be at some disadvantage to Oracle.

        OpenOracle without many of the more nifty features available in current commercial versions may very well be in Oracle's best interests.

[deletia]

-- 

	vi isn't easy to use.				 |||
							/ | \
	vi is easy to REPLACE.




                                                     
Received on Fri Sep 17 2004 - 16:45:14 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US