Re: Decode Oracle Password?

tkyte_at_us.oracle.com (Thomas J Kyte) wrote:

>dtrahan_at_tyler.ultranet.com (David Trahan) wrote:
 

>>qq45_at_liverpool.ac.uk (Ms. D.H. Harvey) wrote:
 

>>>Is there any way to decode an oracle user's password? We'd like to
>>>check those of users accessing our server over our network are not
>>>easily guessable.
 

>>> TIA
>>> Helen
 

>>SQL<>SECURE from BrainTree Technology does this and much more.
>>See http://www.sqlsecure.com, email to info_at_sqlsecure.com or
>>call (617) 982-0200
 

>You don't mean the SQL<>SECURE decode's oracle passwords do you?

Indirectly - yes it does. It can check each user's password against a dictionary of supplied words, the username, and common keyboard combinations and determine if the password is weak. If the password is weak, it is flagged as such but the actual password value is not reported to the user since it would obviously be a glaring security violation (obviously - though - the software knows what the password is).

                                Dave

Dave Trahan
dtrahan_at_ultranet.com Received on Tue Mar 19 1996 - 00:00:00 CET