From: | Christopher Browne <cbbrowne(at)acm(dot)org> |
---|---|
To: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: Oracle DB Worm Code Published |
Date: | 2006-01-07 18:19:13 |
Message-ID: | m3lkxryk7y.fsf@mobile.int.cbbrowne.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
> A recent article about an Oracle worm:
> http://www.eweek.com/article2/0,1895,1880648,00.asp
> got me wondering.
> Could a worm like this infect a PostgreSQL installation?
> It seems to depend on default usernames and passwords -
> and lazy DBAs, IMO.
> Isn't it true that PostgreSQL doesn't have any default user/password?
> Is this an issue we should be concerned about, at some level?
PostgreSQL doesn't allow network access, by default, which more than
makes up for that.
--
"cbbrowne","@","cbbrowne.com"
http://cbbrowne.com/info/slony.html
"...Yet terrible as Unix addiction is, there are worse fates. If Unix
is the heroin of operating systems, then VMS is barbiturate addiction,
the Mac is MDMA, and MS-DOS is sniffing glue. (Windows is filling your
sinuses with lucite and letting it set.) You owe the Oracle a
twelve-step program." --The Usenet Oracle
From | Date | Subject | |
---|---|---|---|
Next Message | Robert Treat | 2006-01-07 19:45:44 | Re: Reordering columns in a table |
Previous Message | Jonel Rienton | 2006-01-07 18:10:43 | Re: The connection is dead |