From InfoWorld:

I expect most Oracle Database shops will find at least five of these life changers in Oracle Database 11g. But there’s one feature, Real Application Testing, that’s so compelling, it’s almost enough reason to upgrade on its own. There’s not a shop out there that doesn’t make code changes, and they all need a solid way of reproducing production workloads to certify those changes without affecting the production environment. Real Application Testing does the trick.

Combining Database Replay and SQL Performance Analyzer, Real Application Testing allows you to capture a workload and its performance stats and replay it, either on the same box or on another box, and compare the performance results. This level of insight into comparative workloads is something that most database vendors are still struggling with.

OK, so there is great improvements in overall usability, data corruption protection in Data Guard and workload replay (cool feature) et cetera but, what about security? Nope no mention. I wonder what David Litchfield, Pete Finnigan and others will have to say about it?

Article Link

In a bit of a diversion from the usual fare here at Liquidmatrix Security Digest, I’d like to take a bit of a recreational moment with you all.

The horrible truth of my life is that… I suck at Scrabble.

I don’t just suck the normal amount… I usually get about 100 or so points when playing against my wife. She usually gets more than 300 when playing with me.

Then I found L33T Tiles.

From the website:

What are L33T Tiles?

L33T Tiles are a replacement tile set for Scrabble and other word games, based on internet slang known as leetspeak. The letter distribution has been modified and extensively tested for optimal play using leet words in the add-on dictionary.

Each set of L33T Tiles comes with 103 tiles, a suede pouch and a manual with additional rules for gameplay. The tiles are colored to emulate a classic terminal window, and the manual is printed on a genuine IBM punch card.

L33T Tiles Long Shot

About 2.5 years ago, we picked up a set as a way to ensure a little fairness in our Scrabble games. (You’ll have to work out for yourself just how long this review has been on my “to do” list.) Since then, we’ve played with them many times – both just the two of us and also with some of our more understanding friends.

I must confess that I have never felt as studly as I did after playing the first game and realizing that I’d won.

L33T Tiles Score Sheet

Finally. A way for years of mis-spent youth on BBSes and later IRC to be turned into a useful life skill.

L33T Tiles Closeup

After many years of play, the tiles are holding up quite well. They are high quality, feel good in your hands as you play, and well… they’re such a lovely indulgence.

L33t Tiles are pretty damn cool.

NOTE: L33T Tiles and Scrabble are games and should not be taken as seriously as most people do.

NOTE 2: It should be obvious that L33T Tiles didn’t pay for this review.

NOTE 3: Someone probably owns the rights to the word “Scrabble”. I think that product reviews might still be fair use.

NOTE 4: Anyone want to play a game?

Tags: , , ,

OK, first and foremost I owe GFI an apology. They had asked (nicely) if I would review their end point security product and I said I would do so happily. Now, that was over a month ago. So, for that I do apologize.

One of the ongoing struggles that people tend to have in IT is the USB storage device. Be it a thumb drive, iPod or what have you, there are varying degrees of alarm. My Motorola RAZR phone for example works as a USB storage device. How often would a security guard seize a cell phone while entering a government installation? I know that many of the DC offices that I worked in never once challenged my cell phone. For USB, it really all depends on your policy set that you are working from. Here is an excerpt from a reader’s email discussing how to monitor USB on their network.

As for the USB, the problem I have is that there is a legitimate business need. We need to transfer large files (>1 GB) to a client on a regular basis. (snip) so we’re stuck moving the files on media via courier. The client computers do not have DVD players so we can’t use those either. At least these will be single use USB Drives never to return to our building.

The frustration is apparent. This provides a nice segue into the GFI product offering, EndPointSecurity. This product comes in two flavours. The first is a web based scan that leverages an OCX to scan your network. For the love of anything holy do not do this unless you have permission. I cannot emphasize that enough. Warning aside this provides small IT shops the ability to check their networks with this free web based utility. Give it a whirl on your lab/home system. The real draw for me is the application itself rather than the web based approach.

Read more

Over the last few days I’ve had a two software companies send me email to ask if I’d be willing to write a review of their software. I think that this may have started with my off the cuff comment last week. But, there is substance behind my comment.

We would be more than willing to review software or hardware if asked. Bearing in mind that if it is crap, we will say so. As well, if it is good we will let our readers know. You’ve been warned. I should point out that this is not a paid service. This is a best effort review and there is no guarantee that we will get to it. We will try however to accommodate requests from firms that we can verify as being genuine.

I will be applying for press credentials to more security conferences as the year progresses. My first attempt fell flat but, I will continue on.

Drop us a line: media AT liquidmatrix DOT org

cheers,
Dave

Tags: , , , ,