OpenRSS » Pete Finnigan

Feeds

44830 items (10040 unread) in 60 feeds

Blogger (1934 unread)

• CNBlog: Blog on Blog (279 unread)
• 未完成 - Incomplete (16 unread)
• Drunk Dream (22 unread)
• 刘润 (12 unread)
• 哈斯日志 (195 unread)
• Signal vs. Noise (396 unread)
• Joel on Software (34 unread)
• demo@virushuo (17 unread)
• 老白说真话|LaoBai's Blog (41 unread)
• 槽边往事---《比特海日志》 (647 unread)
• 张五常作品 (97 unread)
• 大徐 (99 unread)
• Livid (79 unread)

Web2.0 (581 unread)

• 王建硕 (49 unread)
• 车东[Blog^2] (134 unread)
• 刻录事.Zheng (134 unread)
• Herock Post (45 unread)
• blog中文翻译 (2 unread)
• 豆瓣blog (21 unread)
• Web 2.0 Explorer (3 unread)
• Web2.0周刊 (1 unread)
• 言多必得 (81 unread)
• Jeremy Zawodny's blog (111 unread)

OpenSource (1560 unread)

• weblogs.oreilly.com (939 unread)
• Open Source (414 unread)
• Blog on 27th Floor (93 unread)
• Joi Ito's Web (114 unread)

TechTrend (1196 unread)

• Eventful Blog (8 unread)
• del.icio.us (11 unread)
• Official Google Blog (225 unread)
• Google Reader Blog (9 unread)
• ProNet (33 unread)
• Meng Yan ( 孟岩 ) (8 unread)
• Microsoft Team RSS Blog (1 unread)
• Signal vs. Noise (396 unread)
• The Peer-to-Peer Weblog
• Burn This! - The FeedBurner Weblog (15 unread)
• Sifry's Alerts (17 unread)
• 43 Folders (136 unread)
• Googling Google (165 unread)
• Google 黑板报 -- Google 中国的博客网志 (172 unread)

Database (531 unread)

• OraBlogs
• The Tom Kyte Blog (25 unread)
• Pete Finnigan (65 unread)
• Oracle & Starcraft
• DBA notes (192 unread)
• AnySQL's Blog (135 unread)
• Kamus Oracle World
• DBAzine.com - Oracle Articles Archive
• Google Blog Search: link:dbanotes.net (114 unread)

News (3472 unread)

• Slashdot (1614 unread)
• TechCrunch (1858 unread)

ITReview (66 unread)

• 酒游花 (34 unread)
• laolu (32 unread)
• 星张翼轸

Geeks (645 unread)

• Tim Yang's Geek Blog
• hack a day (645 unread)

LifeMusic (55 unread)

• English - The Real Deal (18 unread)
• 太阳的指纹 (37 unread)

KM

• KMBlog :: Knowledge Management Blog

Pete Finnigan (64 unread)

• July 31, 2008
• 14:27

  Conferences and Training Dates

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have just updated my Oracle Security site home page which includes speaking dates down the left hand side towards the bottom of the page. I am going to be speaking in Iceland in September - doing my 2 hour....[Read More]

  Posted by Pete On 31/07/08 At 07:46 PM

• July 30, 2008
• 18:00

  0-day and the first security alert for 3 years from Oracle

   » ‎ Pete Finnigan

  Tags:    [edit]

  Oracle released their first security alert in three years outside of the Oracle Critical Patch Update (CPU) process on the 28th July. An unknown German (according to Alex's blog he is German) hacker calling himself Kingcope has released a 0-day....[Read More]

  Posted by Pete On 30/07/08 At 11:19 AM

• July 27, 2008
• 23:04

  Is Oracle Security getting better or in other words "is Oracle Security good enough?"

   » ‎ Pete Finnigan

  Tags:    [edit]

  There was a post on my Oracle Security forum a couple of weeks ago that i found very interesting and worthy of a note on this blog. A poster raised a good question " Oracle Security is GOOD enough?....[Read More]

  Posted by Pete On 28/07/08 At 12:04 PM

• July 25, 2008
• 12:50

  IOUG/Oracle Software Security Assurance Team joint survery

   » ‎ Pete Finnigan

  Tags:    [edit]

  I promoted the IOUG/Oracle security survey a few weeks back in a post titled " An Oracle Security Survey by The IOUG and Oracle " and today i received an email from John at the IOUG to let me know....[Read More]

  Posted by Pete On 24/07/08 At 08:47 AM

• 12:50

  Kurt Van MeerBeeck (jDul, DUDE) has started a blog

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw today that Kurt Van Meerbeeck who is famous for writing jDUL that became DUDE has started a blog. I have known Kurt for many years on email but only in the last couple of years have we met....[Read More]

  Posted by Pete On 23/07/08 At 10:45 AM

• 12:50

  Advisories for the July 2008 Critical Patch Update and exploit code

   » ‎ Pete Finnigan

  Tags:    [edit]

  There has been a number of emails posted to the bugtraq and full-disclosure mailing lists in the last few days detaling some of the vulnerabilities fixed in the recent Oracle Critical Patch Update July 2008. It is worth detaling some....[Read More]

  Posted by Pete On 22/07/08 At 09:29 PM

• July 21, 2008
• 9:12

  Lateral SQL Injection needs no database privileges

   » ‎ Pete Finnigan

  Tags:    [edit]

  I wrote this last night but then my email connection failed (the ISP must have been doing maintenance) so could not send before i needed to sleep. I am teaching my two day class " How to perform an Oracle....[Read More]

  Posted by Pete On 21/07/08 At 10:01 AM

• July 20, 2008
• 11:42

  July 2008 Critical Patch Update (CPU) is the first to use CVE-ID numbers

   » ‎ Pete Finnigan

  Tags:    [edit]

  One thing I forgot to mention the other day in my post July 2008 Critical Patch Update is out - a remote un-authenticated exploit revealed is that one of the major changes you will notice with this CPU is that....[Read More]

  Posted by Pete On 18/07/08 At 10:34 AM

• July 17, 2008
• 7:04

  Sentrigo release Hedgehog vPatch

   » ‎ Pete Finnigan

  Tags:    [edit]

  Sentrigo have released a new version of Hedgehog called vPatch. Basically, it’s the same Hedgehog product but without the ability to create custom policies. After installation, without any configuration by the customer, Hedgehog vPatch will protect the database from known....[Read More]

  Posted by Pete On 17/07/08 At 09:15 PM

• July 16, 2008
• 17:37

  July 2008 Critical Patch Update is out - a remote un-authenticated exploit revealed

   » ‎ Pete Finnigan

  Tags:    [edit]

  I covered the pre-release announcement for the July 2008 Critical Patch Update (CPU) here a few days ago in a post titled " Oracle Patch Tuesday Is Coming ". Nothing new and major this time from the perspective of the....[Read More]

  Posted by Pete On 16/07/08 At 01:33 PM

• 17:37

  Archive and purge in a security context presentation slides available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I am on the train whizzing back to York at around 120mph after being down in sunny London all day at the UKOUG Archive and purge special event conference. I was presenting there on the subject of archive and purge....[Read More]

  Posted by Pete On 15/07/08 At 06:12 PM

• 17:37

  A new improved version of the woraauthbf Oracle password cracker is available

   » ‎ Pete Finnigan

  Tags:    [edit]

  Laszlo Toth has released a new version of his famous Oracle password cracker woraauthbf. This is version 0.22. The main page for the woraauthbf password cracker describes the tool and its use. The latest C source code can be downloaded....[Read More]

  Posted by Pete On 14/07/08 At 02:14 PM

• July 11, 2008
• 20:59

  nCipher provides encryption key management for TDE in Oracle 11g

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw a news post the other day via google and made a note to mention it here as its a very interesting development. The post is titled " nCipher to Provide Encryption Key Management for Oracle Database 11g....[Read More]

  Posted by Pete On 12/07/08 At 08:38 AM

• 20:59

  Oracle Patch Tuesday Is Coming

   » ‎ Pete Finnigan

  Tags:    [edit]

  Well its been a while since my last blog post, it has been a hectic few weeks workwise, so little time to clear emails, blogs and all those things I would like to do but cannot because work gets in....[Read More]

  Posted by Pete On 11/07/08 At 08:26 PM

• July 05, 2008
• 0:07

  SQL Injection tools

   » ‎ Pete Finnigan

  Tags:    [edit]

  It's been a while since my last post!, too much work, travel and not enough time for catching up I guess. I subscribe to the pentest list over at Security Focus and saw a post on their over the weekend....[Read More]

  Posted by Pete On 30/06/08 At 05:01 PM

• June 20, 2008
• 9:24

  An Oracle Security Survey by The IOUG and Oracle

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have been asked to promote the survey on the IOUG site by the IOUG and Oracle to ask customers for feedback on the security and vulnerability remediation procedures implemented by Oracle customers. I would ask as many people as....[Read More]

  Posted by Pete On 20/06/08 At 12:50 PM

• June 18, 2008
• 9:37

  Hacking Oracle with a coffee machine?

   » ‎ Pete Finnigan

  Tags:    [edit]

  I was down in London yesterday in some meetings and also speaking at the UKOUG Management And Infrastructure SIG on the subject of Oracle Security tools. I will post up the slides later. The discussion got around to the issue....[Read More]

  Posted by Pete On 18/06/08 At 10:45 AM

• June 12, 2008
• 21:20

  Sentrigo Hedgehog

   » ‎ Pete Finnigan

  Tags:    [edit]

  I promised to create a short write up on Sentrigo's Hedgehog product some time ago when Tim Hall posted an entry on his blog titled Sentrigo Hedgehog… where he discussed meeting Slavik Markovich who is the CTO of Sentrigo who....[Read More]

  Posted by Pete On 11/06/08 At 02:26 PM

• June 06, 2008
• 0:21

  Two Oracle Security Presentations

   » ‎ Pete Finnigan

  Tags:    [edit]

  I came across a site yesterday called Authority Base because it threw up an Oracle security presentation. I am always on the look out for any information related to Oracle Security of course. I was actually looking for something related....[Read More]

  Posted by Pete On 05/06/08 At 06:43 PM

• 0:21

  SYSDBA And Triggers And Invoker Rights

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw a post on Paul's Blog the other day and made a note to take a look one evening. It specifically links to a post by Alex Gorbachev over at Pythian that is titled Exploiting SYSDBA Invoker Rights Using....[Read More]

  Posted by Pete On 04/06/08 At 06:29 PM

• 0:21

  Internet wars

   » ‎ Pete Finnigan

  Tags:    [edit]

  I mentioned a couple of weeks ago in a post titled " Oracle Application Server 10g ORA_DAV basic authentication bypass " that i subscribe to the bugtraq mailing list over at Security Focus and that I recommend everyone else to....[Read More]

  Posted by Pete On 02/06/08 At 04:37 PM

• May 23, 2008
• 9:05

  Talking, Training and statistics

   » ‎ Pete Finnigan

  Tags:    [edit]

  I added some code to my site quite a while ago that indicates the number of visitors on-line at the current moment in time. It was for a bit of fun partly and also so that I could guage the....[Read More]

  Posted by Pete On 22/05/08 At 02:02 PM

• 9:05

  Read only Tables or Read only users

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw a post by Richard Foote a few days ago and made a comment on the blog entry and also made a note to chat about it here. Richards post is titled " Read-Only Table Before 11g (A Day....[Read More]

  Posted by Pete On 21/05/08 At 03:45 PM

• 9:05

  Oracle Authentication Process and password algorithm

   » ‎ Pete Finnigan

  Tags:    [edit]

  I found a useful paper on a site a few weeks ago when looking for new sources of Oracle default passwords as this paper had a link to my Oracle default password list in it. The upshot is I made....[Read More]

  Posted by Pete On 20/05/08 At 05:05 PM

• May 17, 2008
• 2:05

  Howard's DORIS script is available again - some security comments from me

   » ‎ Pete Finnigan

  Tags:    [edit]

  I noticed today that Howard's Dizwell-Oracle Reliable Installation Script (DORIS) version 1.0a shell script is available again for download. This is a useful script and great for installing Oracle on Linux without resorting to reading loads of "how-to" sites. Howard....[Read More]

  Posted by Pete On 16/05/08 At 07:50 PM

• 2:05

  License Plate scanners and SQL Injection

   » ‎ Pete Finnigan

  Tags:    [edit]

  I posted a couple of days ago a link to an almost certain hoax of a license plate of a red mini that had been altered to include SQL Injection. This was in a post titled License Plate SQL Injection....[Read More]

  Posted by Pete On 15/05/08 At 09:02 PM

• 2:05

  Oracle Application Server 10g ORA_DAV basic authentication bypass

   » ‎ Pete Finnigan

  Tags:    [edit]

  I would recommend anyone that is interested in securing their Oracle database to subscribe to some of the major security lists such as the bugtraq list at securityfocus.com or the full disclosure list. There are plent more besides these, but....[Read More]

  Posted by Pete On 14/05/08 At 07:42 PM

• 2:05

  License plate SQL Injection

   » ‎ Pete Finnigan

  Tags:    [edit]

  Wow, its been a while since I posted, I have been travelling all over the world over the last month or so, teaching my Oracle security class and also speaking at conferences and performing Oracle security audits. It's been a....[Read More]

  Posted by Pete On 13/05/08 At 07:38 PM

• May 05, 2008
• 12:24

  Slides from OUG Scotland DBA SIG on Oracle Forensics available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have posted the slides to my talk from yesterday at the OUG Scotland SIG to my Oracle Security white papers page . They are the first entries in the page. The talk was 45 minutes about Oracle Forensics. This....[Read More]

  Posted by Pete On 01/05/08 At 02:23 PM

• 12:24

  Conditionally firing triggers

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw a post on the BAR Solutions blog today titled " Triggers… " that was very interesting as I have had the same issue in the past for different reasons. The blog post was around an issue where triggers....[Read More]

  Posted by Pete On 01/05/08 At 01:22 PM

• April 30, 2008
• 12:43

  Lateral SQL Injection and Conferences and security training

   » ‎ Pete Finnigan

  Tags:    [edit]

  I am writing this whilst sat on a train travelling at around 120mph between York and Darlington, this is probably my first blog entry written at speed! I saw that David had released his paper " Lateral SQL Injection: A....[Read More]

  Posted by Pete On 30/04/08 At 08:26 AM

• April 25, 2008
• 12:45

  Slides from OUGN Norway and RISK 2008 Norway available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I was over in Norway this week and the Oracle User Group Norway (OUGN) asked me to speak at an evening user group meeting of theirs. This was a eally friendly group and it was a pleasure to speak there....[Read More]

  Posted by Pete On 25/04/08 At 05:58 PM

• April 14, 2008
• 12:53

  Two remotely exploitable without authentication bugs to be fixed

   » ‎ Pete Finnigan

  Tags:    [edit]

  Oracle's pre-patch advisory note for the next Critical Patch Update (CPU) due this Tuesday (15th) states that there are 17 new security fixes for the database, two for Apex and two of which are remotely exploitable without authentication. The advisory....[Read More]

  Posted by Pete On 14/04/08 At 10:17 AM

• April 07, 2008
• 17:49

  Fine Grained network Access Control in 11g

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw a post by Tim Hall on his blog recently that referenced a new article he had written about the new fine grained network access controls added in 11g. As this is an area I have also looked at....[Read More]

  Posted by Pete On 08/04/08 At 10:25 AM

• 17:49

  C code API to encapsulate OCI

   » ‎ Pete Finnigan

  Tags:    [edit]

  If like me you code in C and use OCI instead of Pro*C then you will be interested in a library written by Vincent Rogier. I have looked at most C++ OCI libraries, and C libraries that encapsulate OCI in....[Read More]

  Posted by Pete On 07/04/08 At 11:52 AM

• April 01, 2008
• 23:16

  A new version of the Oracle password cracker woraauthbf is available

   » ‎ Pete Finnigan

  Tags:    [edit]

  The Oracle password cracker woraauthbf written by Laszlo Toth has been updated and released as a new version 0.21R2 (The R2) is the new part, so even if you are running version 0.21 then please download the new release. The....[Read More]

  Posted by Pete On 31/03/08 At 10:33 AM

• 23:16

  Slides from Pete Finnigan Oracle Security webinar available

   » ‎ Pete Finnigan

  Tags:    [edit]

  This afternoon UK time, Morning time states side I gave a 45 minute webinar with Sentrigo around the subject of Oracle security, particularly around the issues with auditing, hacking and securing an Oracle database. I started out with a 10....[Read More]

  Posted by Pete On 28/03/08 At 08:56 PM

• March 22, 2008
• 18:17

  A new release of Inguma

   » ‎ Pete Finnigan

  Tags:    [edit]

  Wow it's been a while since I had the chance to write blog entries. Business has really taken off and all my spare time is devoted to that at the moment, work, some admin, proposals, accounting...... Whilst this site is....[Read More]

  Posted by Pete On 22/03/08 At 08:00 PM

• March 16, 2008
• 8:35

  Oracle security audit training in the Netherlands with Pete Finnigan

   » ‎ Pete Finnigan

  Tags:    [edit]

  Oracle Security training in the Netherlands I will provide a training course in Oracle Security on April 16/17 with a Dutch Oracle training company, Transfer Solutions ( www.transfer-solutions.com ). This is my how to perform an Oracle security audit training....[Read More]

  Posted by Pete On 14/03/08 At 02:14 PM

• 8:35

  Pete Finnigan is doing a live webinar on Oracle Security March 28th

   » ‎ Pete Finnigan

  Tags:    [edit]

  I will be doing a live webinar on Oracle Security on March 28th in conjunction with Sentrigo. This is free and you can be registered at this link for this event. The webinar is based on my 2 hour Oracle....[Read More]

  Posted by Pete On 15/03/08 At 08:35 PM

• February 29, 2008
• 10:44

  Oracle Security Back to basics slides available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I presented at the Back to basics event organised by the UKOUG in the Paddington area of London. The event was very well attended and was hosted by Lisa Dobson. Tom Kyte, myself, Jonathan Lewis and Julian Dyke all presented....[Read More]

  Posted by Pete On 29/02/08 At 05:41 PM

• February 28, 2008
• 0:37

  Speaking events, SQL Hashes and clever password crackers

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have managed, last week to update my speaking events list on my sites home page to include all the presentations I will be giving over the next couple of months. I am speaking this Thursday at the UKOUG back....[Read More]

  Posted by Pete On 25/02/08 At 09:49 PM

• February 14, 2008
• 5:43

  Oracle Defending Against SQL Injection Tutorial

   » ‎ Pete Finnigan

  Tags:    [edit]

  I posted yesterday about Mary Ann's post that mentioned the internal Oracle Security coding standards and Kris made a post to my blog about a very nice Oracle Corp tutorial (really a CBT) called Defending Against SQL Injection Attacks. This....[Read More]

  Posted by Pete On 14/02/08 At 09:18 PM

• February 13, 2008
• 15:19

  A hint of Oracle's coding standards

   » ‎ Pete Finnigan

  Tags:    [edit]

  I saw Mary Ann's interestingly titled post " Lies, Damn Lies, and Statistics " and had a read. The interesting part for me was the short discussion of the genesis and development around the Oracle secure coding standards that currently....[Read More]

  Posted by Pete On 13/02/08 At 09:11 PM

• February 12, 2008
• 9:54

  Oracle security conferences, illness and ....

   » ‎ Pete Finnigan

  Tags:    [edit]

  It's been a few days since my last blog entry and not many over the last few weeks...:-) Business has been taking off spectacularly so I have been very very busy; burning the candels at both ends as they say....[Read More]

  Posted by Pete On 11/02/08 At 09:37 PM

• 9:54

  A default password script and a cracker helper script

   » ‎ Pete Finnigan

  Tags:    [edit]

  I subscribe to the pentest list on security focus and a recent thread around Oracle password crackers threw up links to a couple of small scripts that are worth a mention simply to keep a record of them here. The....[Read More]

  Posted by Pete On 07/02/08 At 09:58 AM

• 9:54

  PeteFinnigan.com Limited becomes UK partner for Sentrigo Hedgehog

   » ‎ Pete Finnigan

  Tags:    [edit]

  PeteFinnigan.com Limited recently agreed to be the first UK partner for Sentrigo, the producer of the Hedgehog Enterprise™ and Hedgehog IDentifier™ and PeteFinnigan.com Limited will resell these products in the UK. The press release is here: PeteFinnigan.com Limited to offer....[Read More]

  Posted by Pete On 04/02/08 At 01:53 PM

• February 02, 2008
• 9:33

  Oracle database exploits available for January 2008 CPU fixes

   » ‎ Pete Finnigan

  Tags:    [edit]

  I keep an eye on Milw0rm as its a great source of exploits and saw the other day that 4 new posts had been made on there. These are exploits for bugs fixed in the January 2008 CPU. This is....[Read More]

  Posted by Pete On 01/02/08 At 04:24 PM

• 9:33

  A new version of woraauthbf - The Oracle password cracker is released

   » ‎ Pete Finnigan

  Tags:    [edit]

  Today Laszlo has released a new version of his Oracle password cracker woraauthbf. The latest version includes a number of new features and also some bug fixes. The version 0.21 features and fixes taken straight from the release.txt file are....[Read More]

  Posted by Pete On 01/02/08 At 02:20 PM

• January 31, 2008
• 19:17

  PeteFinnigan.com Limited Advisory for the Oracle Jan 2008 CPU

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have just finally had time to write an advisory for the bug that I found that was fixed in the recent January 2008 Critical Patch Update (CPU). The advisory has been added to my alerts page and the details....[Read More]

  Posted by Pete On 30/01/08 At 01:04 PM

• 19:17

  Review of the book Practical Oracle Security

   » ‎ Pete Finnigan

  Tags:    [edit]

  I bought the pdf version of the book Practical Oracle Security by Josh Shaul and Aaron Ingram a few months back, in fact just after it came out and quickly read through it. In general the book flows well and....[Read More]

  Posted by Pete On 28/01/08 At 11:42 AM

• January 24, 2008
• 15:30

  Orablogs is no more (well soon)

   » ‎ Pete Finnigan

  Tags:    [edit]

  I was sad to see today in a post by Justin ( A Fond Farewell to Orablogs )that orablogs is on its way out. This was a great community site started by Brian Duff and as Justin says the first....[Read More]

  Posted by Pete On 24/01/08 At 09:51 AM

• 15:30

  Pete Finnigan; new VPD in the real world paper available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I spoke at the UKOUG UNIX SIG in London yesterday (22nd January 2008) about Using VPD in the real world. The talk focused on the fact that VPD is not a standalone solution and is ideally used as one component....[Read More]

  Posted by Pete On 23/01/08 At 07:00 PM

• 15:30

  UKOUG Unix SIG 22nd Jan and more

   » ‎ Pete Finnigan

  Tags:    [edit]

  It's been a busy last couple of weeks for me so not much blogging. I am getting a slightly slower day tomorrow as I will grab a train down to the UKOUG UNIX SIG in Westminster where I will be....[Read More]

  Posted by Pete On 21/01/08 At 05:39 PM

• 15:30

  Oracle release the January 2008 CPU patch

   » ‎ Pete Finnigan

  Tags:    [edit]

  The January 2008 CPU is out. Oracle have released their Oracle Critical Patch Update Advisory - January 2008 advisory . This is the next in the line of quarterly security patches. This patch seems to have turned some sort of....[Read More]

  Posted by Pete On 16/01/08 At 10:05 PM

• January 15, 2008
• 7:17

  Sentrigo release a study of how many people apply a CPU

   » ‎ Pete Finnigan

  Tags:    [edit]

  Disclaimer:- PeteFinnigan.com Limited is a UK Channel Partner for Sentrigo Hedgehog. Today Sentrigo have released a short press statement titled Survey of Oracle Database Professionals Reveals Most Do Not Apply Security Patches that discusses their findings over the last few....[Read More]

  Posted by Pete On 14/01/08 At 01:16 PM

• 7:17

  Why does the parameter count change

   » ‎ Pete Finnigan

  Tags:    [edit]

  Just a quick post. I saw yesterday a nice post from Tanel titled Why does Oracle parameter count change during session lifetime? and thought it worth a link. I am always impressed with Tanel's work and this is an interesting....[Read More]

  Posted by Pete On 08/01/08 At 07:38 PM

• 7:17

  Happy New Year and an example of having your bank account compromised

   » ‎ Pete Finnigan

  Tags:    [edit]

  I would like to wish all my readers a very happy and prosperous new year for 2008. It's been two weeks since my last post here; things have been hectic (again) with xmas and also work and trips abroad. I....[Read More]

  Posted by Pete On 07/01/08 At 07:55 PM

• 7:17

  List of Security papers

   » ‎ Pete Finnigan

  Tags:    [edit]

  I found a good website that includes a list of 200 security papers. This site is Security and Hacking Documentation . Some of the papers are old but still relevant. The papers are categorised into various sections and themes in....[Read More]

  Posted by Pete On 24/12/07 At 09:21 AM

• December 20, 2007
• 20:03

  emkey and the importance of it in Grid Control security

   » ‎ Pete Finnigan

  Tags:    [edit]

  I had an email from Paul Vallee to let me know of a good post on the pythian blog written by Grégory Guillou titled Oracle Grid Control: The Importance of Deleting the emkey . The title doesnt shout out Oracle....[Read More]

  Posted by Pete On 21/12/07 At 10:23 AM

• 20:03

  In memory backdoors in Oracle

   » ‎ Pete Finnigan

  Tags:    [edit]

  David has a new presentation available from his site titled in-memry backdoors in Oracle . This is a paper about rootkits that David presented at DeepSec recently. This is an interesting area of research. The paper showed in the first....[Read More]

  Posted by Pete On 21/12/07 At 11:52 AM

• December 16, 2007
• 23:43

  Mining Data from the Listener Log

   » ‎ Pete Finnigan

  Tags:    [edit]

  Whilst looking into writing some of my presentations for the UKOUG conference recently in Birmingham I came across a very good three part paper by Arup Nanda titled "Mining Information from the Listener Log - Part 1" that is worth....[Read More]

  Posted by Pete On 16/12/07 At 10:27 PM

• December 09, 2007
• 15:48

  Pete Finnigan Oracle Security Tools presentation from UKOUG available

   » ‎ Pete Finnigan

  Tags:    [edit]

  I have finally found a few spare minutes to start and post up my papers from the UKOUG conference last week. This was a great conference and I spent a lot of time meeting a lot of people, chatting and....[Read More]

  Posted by Pete On 09/12/07 At 07:39 PM

• 15:48

  Pete Finnigan Oracle Security Masterclass presentation from UKOUG

   » ‎ Pete Finnigan

  Tags:    [edit]

  My two hour Oracle Security Masterclass (4MB) from the UKOUG conference in Birmingham is available. The talk was well attended and went well I felt. The paper looks briefly first at what the issues are and then the bulk of....[Read More]

  Posted by Pete On 09/12/07 At 08:54 PM