Security sleuths, sniff out the stupid from your Oracle DBs

Databases remain a security nightmare, says Datacom TSS hacker David Litchfield, so he's built an application to give admins a hand. The Datacom TSS hacker says the Database Security Scorecard will help inform system administrators of security shortfalls in databases and help bridge the language gap between management and tech …

[Anonymous Coward]

So, who's right?

A DBA who doesn't understand the need for security or a security engineer who doesn't communicate with the DBAs?

It doesn't matter who does it as long as it gets done properly.

[Tim99]

Scott Tiger

Years ago, when I did this, I was always unpleasantly surprised by what I could see (and by implication change) if I logged on to an Oracle DB with the above default training/developer credentials.

[Little Mouse]

A useful looking piece of kit...

Unfortunately there's no shortage of crack sniffing tools where I work....

[chivo243]

Re: A useful looking piece of kit...

nice, just nice - have a up vote!

[Tom Chiverton 1]

Nice advert.

Can we have some real stuff now ?