Printable View
Hello all -
I am currently auditing a database group - lots o'databases - Sybase, Oracle, SQL, ya'mammy. I searched and checked the forums for database security and found some stuff, but no forum, but then again I like pictures more than words.
If there isn't a security forum for database security, can we get one? If there is one already can someone point me to it?
Thanks much.
Yeah sure we'll put one up just for you ! wtf ?!?!?!
edit: THeSpecialist - I get your point now lol !
So then - what's the point of this forum kid? This is not a suggestion forum? And just because someone is new to this particular online community, should not allow you to delude yourself to believe they are new to security or IT. You are well on your way to becoming an elitist.
Hey Hey,
I actually think that DB Security would be a good forum.... There are many DB Products out there running on many platforms... and It's something that almost all major businesses have in common. It's very hard to find a company that doesn't have a DB at it's back-end... They're becoming more and more of a security issue as more business use them as backends to their web front-ends and as more CMS and Elearning portals spring up... It would also be a great place for links on the latest SQL Injection attacks which are rather popular.... I figure if Macs have their own Security forum... there'd prolly be a lot more posts in the DB Sec forum.... and I'd mod it too :P haha..... Anyways I do think this one is a good idea... much more useful than zencoders suggestion (at least in the context of this site and the forums that currently exist).
Peace,
HT
I dont know, i dont like it very much, it could go as a sub-forum under Misc. Security Discussions i guess....
still against it....:(
oh: Yes it is a suggestion forum i didnt say DONT SUGGEST STUFF, it was jus my sarcastic way of saying "I Dont like the idea"
Hey Hey,Quote:
Originally posted here by ©opy®ight
I dont know, i dont like it very much, it could go as a sub-forum under Misc. Security Discussions i guess....
still against it....:(
Give us a reason why you don't like it then... instead of attacking it for no reason... People around here are really good at that, if you're going to attack, at least provide some justification. It's a broad field that's becoming more predominant and is gaining a lot of industry interest... It's exactly what a for-profit site (such as this one) should be focusing on. Just because you don't like the idea because it came from someone new to the site isn't a very good reason. This site is here so that JupM can make money.... This means they have to let industry drive this site and right now databases are the way that industry is going... A lot of companies are in the middle of transitions from flatfiles to actual databases... or DB upgrades or the web-front ends that give the possibility of acquiring quite a bit of personal information if not properly secure. When you consider what's involved in creating a forum, and the amount of current interest in the topic... that alone should be justification for adding the forum. One of my roommates works for a local computer security firm and his latest undertaking is learning SQL and SQL Injection because when they do pen tests that's the way they are leaning right now.... They want someone with knowledge in those areas....
Peace,
HT
Maybe its because im not interested in that field, maybe becuase i didnt see that many thread on datavases, but if its becoming popular i guess it couldnt hurt. I wasnt attacking, i just though he was another newbie who wanted to ask a question about a database and wanted a whole forum right away.
I apologize i guess !
Quote:
SQL Injection attacks which are rather popular
If thats the case why not just fill-up this hallow area with threads, dummy. Clearly we are having navagation problems too 'eh?Quote:
and SQL Injection because when they do pen tests that's the way they are leaning right now.... They want someone with knowledge in those areas...
My point was here is another guy who's been here for five seconds and has already found something unsatisfactory. JupM will put up anything lame, useless, not to mention its another ugly object that hangs over threads... yes thats right, this stupid thread AP thing. Basicly its shits and giggles for them. Ideas like that alot of times come from some guy who's only been here a few minutes but when someone who's been around a few years says, "this needs to be removed and the site looks like crap"... JupM just shrugs it off.Quote:
THeSpecialist - I get your point now lol
That's a very good point. It *IS* a suggestion forum. I'd suggest certain people stop f&@%$*! reading it if they don't like all the suggestons. How many really get acted upon? Not that many, it appears.Quote:
Originally posted here by HTRegz
Give us a reason why you don't like it then... instead of attacking it for no reason... People around here are really good at that, if you're going to attack, at least provide some justification.
Very cool and gracious. It's easy to send a flippant remark. It takes some real character to recognize it may have been taken or sent other than as intended, and try to clarify or apologize. Too bad more people on the 'Net don't have this ability, CR. Kudos!Quote:
Originally posted here by ©opy®ight
Maybe its because im not interested in that field, maybe becuase i didnt see that many thread on datavases, but if its becoming popular i guess it couldnt hurt. I wasnt attacking, i just though he was another newbie who wanted to ask a question about a database and wanted a whole forum right away.
I apologize i guess !
TheSpecialist, I know you don't give a ****, but it probably has to do with your attitude. All you ever do anymore is complain, you don't add anything to this site, so why should JupM listen?Quote:
Ideas like that alot of times come from some guy who's only been here a few minutes but when someone who's been around a few years says, "this needs to be removed and the site looks like crap"... JupM just shrugs it off.
Do you actually beleave that answering some of these dumb questions on this board over, and over, AND OVER, AND OVER, agian and agian will actually get you anywhere or you'll have something to gain from it besides a cheesey anti-view?
HT, instead of replying to what I've said and very ironically telling me why im not paid attention to... maybe you should just put me on your ignore list, you ****ing stupid son of a bitch.Thats just it, if JupM will actually implement an idea as stupid as this "thread AP" thing or add 5% of every not-needed feature that is suggested here, then who knows how far they are willing to go. The more that is added and forgotten about, the uglier they make things look around here. It doesn't matter what you all have to say about me when im not the only person who's said the site looks like **** and besides that... the fact that people come here and a few minutes later find something to be unsatisfactory is PROOF that something is wrong and alot of things either need to be redesigned or reviewed if its actually needed.Quote:
How many really get acted upon? Not that many, it appears.
Just to confirm - if we don't hear back from the "powers that be" then that's it right? I only ask as I am wrapping up my audit of our dbs group and found even the basics to be in violation (e.g., generic userids and weak passwords). Well - thanks anyway!
My apologies in advance - as I wanted just to edit an older post of mine - but the time to edit ran out. The reason I am posting again is to just let you know that the DB Security here is becoming a hot topic, especially when I have been talking about encrpytion of database data either at the db level or as the information travels across the network. I brought it up at this thread before: http://www.antionline.com/showthread...hreadid=266346
Considering what types of data can be stored in databases: customer information, credit card numbers, pricing, orders, etc., I believe this would be an area that would require AO's attention, expertise and vigilance to help combat potential and existing threats to various database platforms.
Thank you.