Musings on Database Security

New Oracle 0day

Slavik — Thu, 26 Apr 2012 19:05:10 +0000

Joxean Koret, a hacker we’ve worked with in the past, has just released a 0day following Oracle’s April 2012 CPU. As far as I understand, Joxean believed that the CPU fixed the issue as his name was mentioned and this was the feedback he got from both Oracle and the company he sold the hack [...]

MySQL hack video

Slavik — Wed, 04 Apr 2012 17:59:37 +0000

It’s always funny to hear yourself speak http://www.youtube.com/watch?v=PbmVSGTra30

Enlocked – simple email security

Slavik — Wed, 15 Feb 2012 22:01:24 +0000

Earlier today, a company I recently joined as a board member (and in the interests of full disclosure, an investor as well) announced their first product. The company is called ‘enlocked’ and they are addressing a problem that I’ve felt has been unnecessarily ignored for many years. That is: While we almost all use email [...]

UKOUG 2011

Slavik — Wed, 07 Dec 2011 17:07:31 +0000

Well, that was fun. I had a great time at UKOUG at Birmingham. Met friends, enjoyed the parties and gave a SQL Injection security presentation. All in all, I think it went well – no demos crashing, etc. It’s pretty much the same presentation I gave at in the hacking exposed series so you can download [...]

OOW2011

Slavik — Fri, 07 Oct 2011 21:37:20 +0000

Another year, another Oracle Open World has passed. Great times - Meeting friends – lot’s of friends from Israel this year Attending some interesting presentations – especially the less official ones like Tanel’s Exadata internals Seeing the drama – Salesforce, Larry – the soap opera continues The icing on the cake – Sting and Tom [...]

Hacking exposed presentation and source code

Slavik — Wed, 04 May 2011 22:17:28 +0000

Here is the presentation and demo application I’ve used for the hacking exposed webinar I did on April 14th. The download file includes an eclipse project and instructions under the “etc” folder. It also includes a few scripts I used for blind SQL injection and worm infection. Tell me what you think… HackingExposed