Security, or Sometimes You Can Get too Much of a Good Thing
Many philosophers and historians over the centuries have noticed two trends in human nature:
1. We tend to fall short or exceed a lot in rules, veering from chaos to a police state rather then keeping things on an even keel in between the two
2. Rules are made for other people, I'm the (Fill in your title: DBA/Sys Admin/Demigod, etc.).
So I read with interest this article about excessive rigidity in security rules causing blatant and actually dangerous violations of security over at the Tardate 11.1 blog.
How many times have I been called in to help on a performance problem to discover that, after the long security procedure, the badge issuance, the signed in full-time escort, the DBA shows me their system...with default Sys And System passwords (not possible any more, fortunately, in newer versions of Oracle), large groups of users sharing the same account, and that account granted DBA powers for convenience. Why not just hand out the badges in the streets of (fill in your your favorite country with a large hacker population)?
Great Blogs: Tanel Poder's Blog
Anyone who has read Tanel's postings over the years on the Oracle-L list knows that he is an internals guru extraordinaire, in fact just plain an Oracle guru extraordinaire. His blog has a batch of good items of late, including two references to other good blogs to check out:
and
EBS
This week at the Oracle E-Business Suite blog:
AIA
Need to create your AIA schemas outside the default tablespace, but the FP isn't letting you? You could gnash your teeth. Or you could go to The Official AIA Blog which has a workaround.
APEX
David Peake will be participating in a webcast on April 28th on Doing More with Less with Oracle Application Express.
No comments:
Post a Comment