The information provided with the Oracle patches is limited, making it more difficult for organizations to protect themselves from possible attacks. Oracle applications are typically used in environments that are more sensitive than a Windows desktop, and they are more mission-critical.
More Quotes from Rich Mogull:
Moreover, patching is sometimes impossible, due to ties to legacy versions that Oracle no longer supports. These practices are no longer acceptable.Rich Mogull
(This) shows Oracle can no longer be considered a bastion of security. Database and application managers must begin protecting and maintaining Oracle systems more aggressively.
Rich Mogull
Critical Oracle vulnerabilities are being discovered and disclosed at an increasing rate, and exploit tools and proof-of-concept code are appearing more regularly on the Internet.
Rich Mogull
I think we're doing a moderate job and relying a little too much on databases historically being deeper within the enterprise. Some examples of really bad practices are static passwords stored in clear text in applications and batch jobs, shared administrative accounts, no controls on DBA activity, etc. We can definitely be doing better.
Rich Mogull
The range and seriousness of the vulnerabilities patched in this update cause us great concern. The database products alone include 37 vulnerabilities, many rated as easily exploitable and some potentially allowing remote database access. Oracle has not yet experienced a mass security exploit, but this does not mean that one will never occur.
Rich Mogull
We recommend that users shield themselves before addressing vulnerabilities, but in this case they can't apply a shield and are exposed to possible attack until the patch is applied.
Rich Mogull
Readers Who Like This Quotation Also Like:
Based on Topics: Environment QuotesA lot of directors don't want the pressure of a movie the size of Pearl Harbor. But I love it. I thrive on it.
Michael Bay
Action is the antidote to despair.
Joan Baez
I get just as much of a thrill out of constructing a good sentence that gets a laugh at the end as I do from a joke.
Julian Clary