News for hackers. Stuff that matters.

A comment on Oracle started as a CIA project (2014). Parent comment

Re:Oracle started as a CIA project (2014) by createdapril24 on Thursday August 25, 2022 @01:40PM (#32597182)
Note the "problems they had" aren't necessarily "they needed a better database technology". Oracle's mission is to have all bits of data in the world processed or stored on an Oracle system (source: I worked for Oracle, this was the internal mission statement).

Oracle collects:

1. Who is staying in which hotels and in which rooms

2. Who is eating at which restaurants and going to which entertainment facilities

3. Who is getting what health services

4. Who is travelling where across travel industry

5. Who is working for which companies in what roles and how much are they paid

This is incredibly powerful intelligence the CIA could not NOT want. Replace "who" in any of the above with a politician in a country of interest, or other person of interest/intelligence target.

<strike> It's sort of like Facebook getting CIA funding. CIA definitely has interest to know intimate details of everyone's lives, who is sharing what information with who, and how social fabric in different countries are organized. They/we would be crazy not to. Taking the converse: The CIA wasn't funding Facebook because they really needed to socialize more with friends and family. </strike> Please see thread below. CIA investment in Facebook has not been established.

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by spullara on Thursday August 25, 2022 @03:49PM (#32599095)
That is a pretty far cry from Oracle having the data, especially pre-cloud. I think you are conflating "an Oracle system" with a system that Oracle actually controls rather than and end user that using the software. This is like saying a hard drive manufacturer has all the data that are on their hard drives.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by mintplant on Thursday August 25, 2022 @05:41PM (#32600292)
I think 'createdapril24 is referring to Oracle's broader data brokerage/marketplace business rather than strictly their on-premise database system business.

https://techcrunch.com/2022/08/22/oracle-us-privacy-class-ac...

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @04:27PM (#32599542)
Your data is in a piece of software controlled by Oracle. They can easily create a backdoor designed for NSA use. Whether they "have" your data on their hardware or not doesn't make much of a difference in this case.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by spullara on Thursday August 25, 2022 @04:41PM (#32599687)
Maybe don't connect your database to the internet? Which is the normal way to install it locally?
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @11:05PM (#32602920)
If you connect it to any network at all. Is it beyond the NSA to string together several obscure vulnerabilities to attack a specific target? [1]

I mean.. I suppose you could air gap your database, but of what utility is it to you now?

[1]: https://en.wikipedia.org/wiki/Stuxnet

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by tyingq on Thursday August 25, 2022 @06:03PM (#32600509)
There was a time when Oracle sort of worked that way. On-prem Oracle has mostly migrated to an appliance type model where phone-home is standard and almost mandatory. "Exadata".
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by idiotsecant on Thursday August 25, 2022 @03:10PM (#32598520)
Are you suggesting the CIA has ways to exfiltrate data from Oracle databases assisted by Oracle but without knowledge or consent of the user? That would be a pretty big deal.

If not, what are you saying?

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by pigeons on Thursday August 25, 2022 @03:54PM (#32599155)
Have you ever looked at the history of Oracle security flaws, as well as their reluctance to improve it? A public resource for this is David Litchfield.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by LargoLasskhyfv on Thursday August 25, 2022 @04:00PM (#32599235)
Not OP. Just saying:

[X] https://en.wikipedia.org/wiki/National_security_letter

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by astrange on Thursday August 25, 2022 @06:05PM (#32600532)
Why would you need data to be in a specific brand of database before you can send legal process for it?
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by LargoLasskhyfv on Thursday August 25, 2022 @06:09PM (#32600566)
You wouldn't. It just simplifies 'things', from a technical and operational POV.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by idiotsecant on Friday August 26, 2022 @12:52PM (#32609903)
In what way does it simplify 'things'?
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by itronitron on Thursday August 25, 2022 @03:35PM (#32598868)
No actually, the problems they had are just that the US intelligence community needed relational databases. Keep in mind that this preceded the internet and online hotel bookings.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by atlasunshrugged on Thursday August 25, 2022 @01:56PM (#32597440)
Do you have a link to details about the CIA funding FB? I heard that as a rumor but thought it was debunked
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by createdapril24 on Thursday August 25, 2022 @03:00PM (#32598387)
Honestly I had not fact checked this. A quick internet search found lots of articles making different claims (CBS News says yes, Reddit says yes, IQT website does not list, Quora says no.) Overall there doesn't appear to be a very strong argument and this Quora article (https://www.quora.com/What-is-the-substance-of-the-claim-tha...) makes a compelling case that the connection is too tenuous.

I will remove from parent content.

[ Parent | on HN ]