When discussing the public exposure of Oracle vulnerabilities, opinions about those who publicize hacking techniques.  Some suggest that the hacking expert is doing a public service while others believe that exposing an Oracle vulnerability enables an unethical DBA to hack into a database. 

Sadly, not all database professionals have scruples, as we see in these real-world examples of Oracle hacker horror stories. 


http://www.dba-oracle.com/t_hackers_breaches_horror_stories.htm


While publically exposing vulnerabilities may be illegal in parts of the United States (the crime of aiding and abetting), there are some European Oracle "researchers" who offer "black hat" and "secret" Oracle hacking tutorials.

The question is none of ethics and whether there is any legitimate use for the disclosure of Oracle vulnerabilities?  Oracle Corporation responds with a resounding NO!

According to this eWeek article, Oracle Corporation condemned a hacker as being selfish and irresponsible for putting Oracle customers at "severe risk":

"A few hours after [the hacker] went public with a technical description of the flaw, including a blow-by-blow demonstration of ease in which an attack could occur, Oracle lashed back, accusing the British researcher of putting its customers at severe risk for selfish, irresponsible reasons."

http://www.dba-oracle.com/t_hackers_expose_vulnerabilities.htm

*****************************************

Need a Health Check?

Oracle is the world's most complex and robust database and there are hundreds of sub-optimal settings that can cripple your database performance.

Burleson Consulting has a great Oracle health check where we identify all database bottlenecks to ensure that your mission critical system is running at optimal speeds.

Just call 800-766-1884 to schedule your health check.

*****************************************

Need Oracle Training?

The very best Oracle training comes from Burleson Consulting, where you get an on-site visit by an experienced Oracle expert and author. Whether it's one-on-one mentoring or getting a customized on-site Oracle training class, there is no substitute for BC Oracle training. Just call 800-766-1884 for details, and check out our on-site Oracle training catalog at the following link:

http://www.dba-oracle.com/bc-catalog.pdf 

*****************************************

There's Always Room at the Top

Burleson Consulting continues to grow as the Oracle community recognizes that high quality Oracle support and training is a cost effective option in these tough economic times.

If you have distinguished yourself in your Oracle career and are ready to step up and enjoy the rewards of joining the ranks of America's top tier support consultants we would like to hear from you.

Evidence of high achievement as an Oracle professional might include publication of books and articles for the Oracle community, achieving an advanced degree from a competitive university and seeking out hands-on experience with complex databases. See here for details and a full qualifications list:

http://www.dba-oracle.com/jobs.htm