Re: physical standby database managed/non-managed

  • From: Ray Stell <stellr@xxxxxxxxxx>
  • To: oracle-l <oracle-l@xxxxxxxxxxxxx>
  • Date: Thu, 26 Jan 2006 09:53:38 -0500

Sandeep's thread about his insecurity staff lead me to
this interesting article.  I was blind, but now I see:

http://www.technologyreview.com/InfoTech-Networks/wtr_16051,258,p1.html

"If we succeed in what we are trying to do, this is bigger than anything
we, as a research community, have done in computer science so far..."

We can only hope to slow the bleeding long enough. 


On Wed, Jan 25, 2006 at 10:11:51AM -0500, Sandeep Dubey wrote:
> Security guys dont allow to ping from one server to other server. I can not
> create sqlnet connection either.

Preventing use of the network is not providing network security.
It is providing DoS.  They should be able to allow two known machines
to communicate directly without there being a significant vulnerability.
True their design is very secure, but not functional.  They are providing
network security by removing the network.  They should be able to open
and manage a path for you and know who uses the path and monitor/block
inappropriate patterns.  That would be providing security.
--
//www.freelists.org/webpage/oracle-l


Other related posts: