The real strength comes from applying customisations to adapt the function to our particular needs. Oracle’s developers would probably not thank me for saying this, but there hasn’t been a great deal of evolution in the years between 10g’s verify_function and 12c’s ora12c_strong_verify_function, even though this latest incarnation apparently adheres to the Department of Defense’s Database STIG (Security Technical Implementation Guide).
What this script contains depends largely on what version of the Oracle database you have installed: before 11g, it would install the verify_function function for 11g, it would install verify_function_11G and for 12C, it would additionally install ora12c_verify_function and ora12c_strong_verify_function. In your $ORACLE_HOME/rdbms/admin folder you should find the utlpwdmg.sql file. If you created your database using the DBCA (configuration assistant), you should have the native password complexity functionality switched on by default if you created your database using the CREATE DATABASE statement, you will need to enable it yourself. It is our duty as database administrators to nudge users towards more complex passwords, and Oracle furnishes us with the tools to do so. I guess the old adage is true: it doesn’t matter how many bolts you’ve got on the door if you’re going to leave it ajar. The current theories abounding seem to suggest that the vulnerabilities lay not with Apple, but with the strength of the actresses’ passwords – or, rather, the lack of it.
Find a way to rope a cute kitten into the story and the Internet might very well explode. It seems there’s no greater click-bait than a story about indecent photos of beautiful young Hollywood actresses stolen from their iPhones.
0 kommentar(er)
