Re: [ISN] Oracle Chief Challenges Hackers

From: InfoSec News <isn_at_c4i.org>
Date: Fri 16 Nov 2001 - 02:53:49 CST
Forwarded from: Jay D. Dyson <jdyson@treachery.net>

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 15 Nov 2001, InfoSec News wrote:

> LAS VEGAS -- Oracle's top executive told computer hackers on Monday
> night that his software is so secure they would never be able to break
> into Oracle's Web site, a boast that may be taken by many as a
> challenge. 
> 
> "This is a very dangerous thing to say--I'm not inviting a bunch of
> hackers to bring down the Oracle Web site," said Larry Ellison, Oracle's
> chair and chief executive officer. "But so far, with more than 1000
> attacks a day, we've had no downtime, no interruption of service." 

	If stupidity is dangerous, then Mr. Ellison's statement is
accurate.

	For clear and concise refutation on why the challenge is bogus, I
need only point to Bruce Schneier's December 1998 remarks on the matter:

	http://www.counterpane.com/crypto-gram-9812.html#contests

	Mr. Ellison would do well to read it and recognize his folly.

	And for the record, nothing, but *nothing* is perpetually secure.
Time is the greatest reducer of perceived absolutes.  And when (not if)
the time comes when Oracle is breached, I will personally laugh...

	...and point.

- -Jay

  (    (                                                        _______
  ))   ))  .--"There's always time for a good cup of coffee"--.  >====<--.
C|~~|C|~~|(>------ Jay D. Dyson -- jdyson@treachery.net ------<)|    = |-'
 `--' `--' `-Terrorists prefer victims who don't strike back.-' `------'

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO/N487lDRyqRQ2a9AQEc1gQAnsoRDDZetlEJ60oag3fhbswVwdZDvnu6
C3OPBSXS+8908nRfZJuk3iu0nuK1UkrUQ5nQhiMV8TsJoJ+8SwTzzRSWCBXtgBhJ
QIrWVrb5VaDIbnrUIsRcWzr6DPQBOSrGBEYMrb4V30p+EeCyLuhZdcLjNRlip3Se
59FmIPZIy4c=
=pYVI
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo@attrition.org with 'unsubscribe isn' in the BODY
of the mail.
Received on Fri Nov 16 05:40 CST 2001
Google
 
Web www.infosecnews.org