Re: Adding some random characters to Oracle password

From: Howard J. Rogers <hjr_at_dizwell.com>
Date: Fri, 29 Oct 2004 05:18:52 +1000
Message-Id: <4181460a$0$21982$afc38c87@news.optusnet.com.au>

Alan wrote:
[snip]

>>
>> Scalability is just one concern. What happens if the secret ID and

> password

>> ever get discovered?

>
> It can't get discovered because it is hard-coded and compiled into the
> app. Source code is secured.

Oh dear. I kind of knew you'd say that.

And no-one could take your application and reverse engineer it? No-one could torture your developers (now there's a thought) to discover what it is? No-one could packet sniff your network to discover what is being sent?

"It can't get discovered" is a *huge* claim to make.

Regards
HJR Received on Thu Oct 28 2004 - 14:18:52 CDT