Fun facts about Oracle security

Hi,

Maybe, it's well-known, but:

1. If you create users where username and password are got as left and right part of some particular string ("userpassword", for example):

create user userpa identified by ssword; create user userpass identified by word;

you'll see the equivalent password hashes:

USERNAME                       PASSWORD
------------------------------ ------------------------------
USERPA                         342C0CF1DDCAD9F3
USERPASS                       342C0CF1DDCAD9F3

2. SQL*Net password's "challenge" request seems to be random at the first look, but it isn't. It'll repeat every 24 hours for each millisecond for each particular user.

Maxim. Received on Fri Mar 01 2002 - 16:08:16 CET