Re: Security Problems of using Pro-C

In a previous article alacy_at_hayes.com writes:  

>>It appears that any of these options will allow people to see the passwords.
>>But when I use an Oracle tool option 2 seems to work. Ie if I use
>>
>> sqlplus name/password _at_program
>>
>>The name and password does not show when I do a "ps". This appears to work for
>>all the tools provided by Oracle. Does anyone know how to code a Pro-C program
>>so that it does the same thing? I think this would cover my security problem
>>of using Pro-C.

   The tools are clobbering the userid and password from argv[]. Unfortunately this only works on a few operating systems (fewer and fewer as time goes by).

-- 
   - Doug Harris
     Database Administrator,
     System Development Division,
     Statistics Canada             ### Standard Disclaimer Applies ###