Pete Finnigan's Oracle security weblog

Locate an Error in Wrapped PL/SQL

Mon, 18 Mar 2024 13:01:10 +0000

I had a conversation a few weeks ago with someone who asked me how to find a missing table when you have a wrapped PL/SQL file and cannot see the source code and you install it and it gives an....[Read More]

Posted by Pete On 18/03/24 At 01:00 PM

Attention PL/SQL Programmers - is your PL/SQL at risk of breach?

Mon, 18 Mar 2024 13:01:10 +0000

Do you develop software in PL/SQL? I will show you in the next few minutes how you can learn to find security vulnerabilities in your PL/SQL code Even if the database that your PL/SQL is deployed to is secure then....[Read More]

Posted by Pete On 06/03/24 At 09:45 AM

How to Secure all of Your Oracle Databases - Part 1

Mon, 18 Mar 2024 13:01:10 +0000

How do you know how secure your Oracle databases are? How secure should your Oracle databases be? These are interesting questions that we will cover in this three part post. This first part is going to cover the high level....[Read More]

Posted by Pete On 19/02/24 At 01:43 PM

Happy 21st Birthday to PeteFinnigan.com Limited

Mon, 18 Mar 2024 13:01:10 +0000

My company PeteFinnigan.com Limited is 21 years old today!! It seems that time has gone so fast. When I started the company my oldest son was a baby and now he is almost 22 years old and works here in....[Read More]

Posted by Pete On 12/02/24 At 11:28 AM

Securing APEX

Mon, 18 Mar 2024 13:01:10 +0000

I have liked APEX for many years and been involved in auditing and securing Oracle databases that include APEX for many years. What surprises me sometimes is that those deploying and developing an APEX application treat it like a box....[Read More]

Posted by Pete On 29/01/24 At 03:35 PM

Investigate an Oracle Database Breach

Mon, 18 Mar 2024 13:01:10 +0000

I have investigated a number of possible and later proved data breaches in Oracle databases over the years and more recently just before Christmas I was doing the same again for a client. I cannot talk about any specifics of....[Read More]

Posted by Pete On 23/01/24 At 02:35 PM

Happy New Year for 2024

Mon, 18 Mar 2024 13:01:10 +0000

It has been a while since my last blog on the 29th December on the ACCESSIBLEBY Clause in PL/SQL . We had a well earned break after the New Year and myself, my wife and my youngest son visited New....[Read More]

Posted by Pete On 17/01/24 At 03:50 PM

ACCESSIBLE BY Clause in PL/SQL

Mon, 18 Mar 2024 13:01:10 +0000

Over many years I have advocated using security in PL/SQL that checks that a caller is coming from the right place. For many years we have been able to do this with the call stack and test on our PL/SQL....[Read More]

Posted by Pete On 29/12/23 At 03:14 PM