Re: Oracle Chief Challenges Hackers

[InfoSec News <isn () c4i org>]

Forwarded from: Jay D. Dyson <jdyson () treachery net>

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 15 Nov 2001, InfoSec News wrote:

> LAS VEGAS -- Oracle's top executive told computer hackers on Monday
> night that his software is so secure they would never be able to break
> into Oracle's Web site, a boast that may be taken by many as a
> challenge. 
>
> "This is a very dangerous thing to say--I'm not inviting a bunch of
> hackers to bring down the Oracle Web site," said Larry Ellison, Oracle's
> chair and chief executive officer. "But so far, with more than 1000
> attacks a day, we've had no downtime, no interruption of service." 

        If stupidity is dangerous, then Mr. Ellison's statement is
accurate.

        For clear and concise refutation on why the challenge is bogus, I
need only point to Bruce Schneier's December 1998 remarks on the matter:

        http://www.counterpane.com/crypto-gram-9812.html#contests

        Mr. Ellison would do well to read it and recognize his folly.

        And for the record, nothing, but *nothing* is perpetually secure.
Time is the greatest reducer of perceived absolutes.  And when (not if)
the time comes when Oracle is breached, I will personally laugh...

        ...and point.

- -Jay

  (    (                                                        _______
  ))   ))  .--"There's always time for a good cup of coffee"--.  >====<--.
C|~~|C|~~|(>------ Jay D. Dyson -- jdyson () treachery net ------<)|    = |-'
 `--' `--' `-Terrorists prefer victims who don't strike back.-' `------'

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO/N487lDRyqRQ2a9AQEc1gQAnsoRDDZetlEJ60oag3fhbswVwdZDvnu6
C3OPBSXS+8908nRfZJuk3iu0nuK1UkrUQ5nQhiMV8TsJoJ+8SwTzzRSWCBXtgBhJ
QIrWVrb5VaDIbnrUIsRcWzr6DPQBOSrGBEYMrb4V30p+EeCyLuhZdcLjNRlip3Se
59FmIPZIy4c=
=pYVI
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.