In an interesting post, here we see Oracle telling you right where a file is that has some of your critical and sensitive passwords in it in My Oracle Support note 458064.1. Sure this might be filed under "for emergencies only" but I think it is dangerous for individuals with either server access or the technical know-how to get to the files being able to get a hold of this file and the associated passwords. Good note to read, since the first step in battling security holes is to know where they currently exist.
No comments:
Post a Comment