Category Archives: Database Stuff

Oracle #JSON check constraint #quicktip

I came across an interesting problem, we are using JSON in one of our applications and have no control over the people sending us the JSON data. This has caused some issues with data quality. One thing we needed to … Continue reading

Posted in Database Stuff | Tagged , , , | Leave a comment

#Oracle #SQLcl #quicktip

If you’re not following Jeff Smith and Kris Rice, you should be. These are two really smart guys, who are designing the tools we use everyday to do our jobs. If you’re like me, 99% of your data is in … Continue reading

Posted in Database Stuff | Tagged | Leave a comment

#POUG2018 is right around the corner.

Let’s start with some key facts. I learned this from my High School Civics teacher who made us learn a bit about journalism along with studying the Constitution.  Who: The Polish Oracle Users Group, hosted by some of the most … Continue reading

Posted in Database Stuff, encryption, infosec, Oracle Users Group | Tagged , , , , | Leave a comment

Where am I, Dev, Test, Production? #quicktip #putty #sqlcl

If you’re like me, you frequently have many environments open at the same time in putty, sqlcl, sqldeveloper, or other tools. This happened quite a few years back, I was switching between my dev, test, and production environments, doing some … Continue reading

Posted in Database Stuff | Leave a comment

Putting #CodeBasedAccessControl to work. #CBAC #Database #infosec #Oracle #TrustedPath

Grab a cup of coffee or a cup of tea. This is not a short post; There is a lot to explain, and many point are repeated. You need to understand all the in’s and out’s of CBAC. However; once … Continue reading

Posted in Code Based Access Control, Database Stuff, infosec, PL/SQL, Security, Trusted Path | Tagged , , , , , , | Leave a comment

Upcoming events

March 21 – 22: I will be speaking at Utah Oracle Users Group Training Days (and getting some Spring Skiing in.) http://utoug.org/TrainingDays I will be speaking on Holistic Database Security and Secure Coding. My Holistic Database Security presentation has come … Continue reading

Posted in Database Stuff | Leave a comment

That’s a really bad idea #audit #infosec #fraud #financialfraud

I’m not even sure how to approach talking about this. One customer with a complex application that is both financial and regulatory was given a backdoor into the system to manually make changes to data without audit or validation. To … Continue reading

Posted in Database Stuff | Tagged , , , | Leave a comment

#TravelHacks Look at yourself in the mirror, would you give yourself an upgrade?

“I will judge you by how you treat the people who serve you.”  I’ve spent a lot of time on social media helping some friends with their travel issues. Mostly I give people little hacks that I learned the hard … Continue reading

Posted in Database Stuff | Tagged , , , , , , , , , , | Leave a comment

PGA Memory Operation Events

I’ve been working on putting together some performance test for my secure coding talk coming up at Hotsos and encountered something I can not quite explain. This test case does a bulk select into a type and returns the type … Continue reading

Posted in Database Stuff | Tagged , , | Leave a comment

Update to my earlier #quicktip on setting #plsql scope and warnings.

I noticed a error in my code for setting PLSCOPE_SETTINGS and PLSQL_WARNINGS. QuicTip Logon.sql What I did was get the instance name out of v$instance to figure out if I was connecting to a production environment or one of the lower environments. The … Continue reading

Posted in Database Stuff, Life of a Oracle DBA, PL/SQL | Tagged , , , , , , , , | Leave a comment

My upcoming Spring events @OracleACE #InfoSec

March 5 – 8: I will be speaking at the Hotsos Symposium in Dallas Texas. https://www.hotsos.com/apex/f?p=200:61801:6152298924404 I will be showing how to secure your high performance code. We will be looking at some coding standards, what common errors we are … Continue reading

Posted in Database Stuff | Tagged , , , , , , , , , , | Leave a comment

2017 was a crazy year, 2018 is going to be challenging

It’s been a crazy year. In 2017 I’ve done talks in Paris France, Helsinki and Rovaniemi Finland, Sofia Bulgaria, Moscow Russia, Denver Colorado, Las Vegas Nevada, San Antonio Texas, Krakow Poland, Dushanbe Tajikistan, and Raleigh North Carolina. A few of … Continue reading

Posted in Database Stuff | Leave a comment

Yet another breach through #SQLInjection

The following quote bothered me a lot. “No amount of best practices or prohibitive steps is going to stop a determined hacker.” While this is a true statement, what it leaves out is if you make it difficult by securing the … Continue reading

Posted in Database Stuff | Tagged , , | Leave a comment

Upcoming #POUG17 and #tajoug #techconftj* #Oracle #plsql #infosec #fun

99% of my presentations are technical, addressing our information security needs. Then every now and again, I get to do something fun. There was “Hacking The Human Brain” last June at BGOUG. My next trip in September is taking me … Continue reading

Posted in Database Stuff | Leave a comment

What is it like on the Oracle User Group Speaking circuit?

This is how most of my trips start, a ride to the airport with my headset on. Listen to some easy listening music such as AC/DC or Iron Maiden to get me in the mood for travel. Once at the … Continue reading

Posted in Database Stuff | Tagged , , , , , | Leave a comment

#Oracle #sqldev 17.2.0.188 MAJOR improvement

This is going to be quick, I don’t get a lot of time to read new features documentation. I normally reserve that for once a month, print em’ out and read over a nice glass of Scotch. Hey it works … Continue reading

Posted in Database Stuff | Leave a comment

Kinda disturbed by an article I just read. #infosec #rant

As most of you know I live on the defense side of infosec. As attack vectors are exposed, I study them to learn how to design systems that can defend against them. There are some biggies, sql injection, cross site … Continue reading

Posted in Database Stuff | Leave a comment

Exciting times. #poug #tajoug #techconftj*

I will making my first trip to Krakow Poland and Dushanbe Tajikistan. This trip will cover over 24,000 miles in air travel and five different airlines. POUG High Five. The Polish Oracle Users Group will be having their annual tech … Continue reading

Posted in Database Stuff | Leave a comment

Getting to know you, getting to know all about you. #infosec #windows10

Windows 10 has the capability to record everything you say, everything you type and everything you write. Okay, I have a fundamental problem with this. Microsoft implemented this feature in the Beta release of Windows 10 to help the product … Continue reading

Posted in Database Stuff | Leave a comment

#quicktip #oracle #sqlcl logon.sql #PLSCOPE_SETTINGS and #PLSQL_WARNINGS

Quick Tip. My logon.sql file. I don’t want plscope_settings and plsql_warnings set when I’m in production; but if I’m in my test / dev / sandbox environments, then I do turn them on. This helps. Enjoy; this should be self … Continue reading

Posted in Database Stuff | Leave a comment

#GDPR – RIGHT TO ACCESS. Security is a feature #3 Right to Access Part 1 of 2

The GDPR Right to access can get a bit complicated as it covers a few things that provide some challenges for us. What is the purpose of the processing? Lets face it, we process data on people for a number … Continue reading

Posted in Database Stuff, GDPR, infosec, Security | Tagged | Leave a comment

#SQLDeveloper Unit Testing

I’ll get back to the GDPR series tomorrow. Can I get a show of hands, How many people do unit testing? I’ve been in a lot of shops where unit testing and code reviews have been passed up in the … Continue reading

Posted in Database Stuff | Leave a comment

#GDPR is coming Security is a feature #2 Data Masking

#GDPR is coming Security is a feature #2 Data Masking In the context of GDPR, data masking should be done so that the all the data attributes on a person should not be able to define that person. Most of … Continue reading

Posted in Database Stuff | Leave a comment

#GDPR is coming Security is a feature #1

Security is feature. Over the next few weeks, I’ll be looking how some of the issues on how GDPR will be impacting us as technical professionals. There are a lot of things that I find technically interesting in GDPR such … Continue reading

Posted in Database Stuff | Leave a comment

Yet another Phishing Attack #DontClickThatLink #Infosec

So I get up this morning, check email and what is waiting for me. A phishing email. Okay lets do a little analysis to see how to detect this really quick. 1) My paypal account is not linked to this … Continue reading

Posted in Database Stuff | Leave a comment