<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings on Database Security &#187; technical tips</title>
	<atom:link href="http://www.slaviks-blog.com/category/technical-tips/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.slaviks-blog.com</link>
	<description>Slavik&#039;s Blog</description>
	<lastBuildDate>Thu, 02 Sep 2010 00:03:08 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Changing MS SQL Server system stored procedures</title>
		<link>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/</link>
		<comments>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/#comments</comments>
		<pubDate>Fri, 20 Aug 2010 03:30:43 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[MS SQL Server]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=269</guid>
		<description><![CDATA[Sometimes, you want to enhance or change system stored procedures to add functionality like security related code. This is not supported and might blow up in your face so all the standard caveats apply. If it blows in your face, tough luck! SQL2000 is pretty straight forward and you can find plenty of places on [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/08/19/changing-ms-sql-server-system-stored-procedures/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>dbms_jvm_exp_perms 0day fixed on Windows 11gR2</title>
		<link>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/</link>
		<comments>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/#comments</comments>
		<pubDate>Thu, 08 Apr 2010 17:48:22 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=262</guid>
		<description><![CDATA[Alex wrote a nice blog post showing that the 0day found by David Litchfield [pdf] is now fixed in the newest Oracle 11.2.0.1 release for Windows. He has some analysis of the fix as well as some good examples of using Repscan to view permissions and audit records using the online browser. Whenever I need [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/04/08/dbms_jvm_exp_perms-0day-fixed-on-windows-11gr2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>pysql</title>
		<link>http://www.slaviks-blog.com/2010/04/06/pysql/</link>
		<comments>http://www.slaviks-blog.com/2010/04/06/pysql/#comments</comments>
		<pubDate>Wed, 07 Apr 2010 00:36:15 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[Python]]></category>
		<category><![CDATA[SQL*Plus]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=259</guid>
		<description><![CDATA[During the weekend, I stumbled across an interesting project named pysql. The project aims to replace SQL*Plus with a sane shell written in Python with history, tab completion and many extensions. Being a veteran of using SQL*Plus, I know that some of the above can be actually achieved on Linux/Unix environments with SQL*Plus using a [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/04/06/pysql/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Oracle sql_id and hash value</title>
		<link>http://www.slaviks-blog.com/2010/03/30/oracle-sql_id-and-hash-value/</link>
		<comments>http://www.slaviks-blog.com/2010/03/30/oracle-sql_id-and-hash-value/#comments</comments>
		<pubDate>Tue, 30 Mar 2010 18:01:50 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=255</guid>
		<description><![CDATA[Tanel published a great post a while ago talking about Oracle&#8217;s sql_id and hash values in Oracle 10g+. I wanted to be able to compute sql_id and hash values directly from SQL statements for our Hedgehog product. I did a few tests and could not match the MD5 value generated from the SQL statement to [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/03/30/oracle-sql_id-and-hash-value/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Salesforce errors</title>
		<link>http://www.slaviks-blog.com/2010/02/06/salesforce-errors/</link>
		<comments>http://www.slaviks-blog.com/2010/02/06/salesforce-errors/#comments</comments>
		<pubDate>Sat, 06 Feb 2010 19:45:04 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[security]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=223</guid>
		<description><![CDATA[As part of my continued crusade to get rid of all database errors returned from the application to the user, one of our developers sent me the following error message coming from Salesforce.com: SF Error So, what can we learn from the error? SF uses Java as a backend SF uses Oracle as the database [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/02/06/salesforce-errors/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Blind SQL Injection in Oracle</title>
		<link>http://www.slaviks-blog.com/2009/10/13/blind-sql-injection-in-oracle/</link>
		<comments>http://www.slaviks-blog.com/2009/10/13/blind-sql-injection-in-oracle/#comments</comments>
		<pubDate>Tue, 13 Oct 2009 18:19:31 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[Oracle]]></category>
		<category><![CDATA[SQL injection]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[technical tips]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=187</guid>
		<description><![CDATA[I&#8217;m doing a lot of presentations where I mention SQL injection and even show detailed examples of both injecting applications and injecting stored program units within the database. What I&#8217;d like to do in this post is describe SQL injection types, give concrete examples for a web applications and Oracle and talk a bit about [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/10/13/blind-sql-injection-in-oracle/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 1.492 seconds -->
