News for hackers. Stuff that matters.

A comment on Oracle started as a CIA project (2014). Parent comment

Re:Oracle started as a CIA project (2014) by spullara on Thursday August 25, 2022 @03:49PM (#32599095)
That is a pretty far cry from Oracle having the data, especially pre-cloud. I think you are conflating "an Oracle system" with a system that Oracle actually controls rather than and end user that using the software. This is like saying a hard drive manufacturer has all the data that are on their hard drives.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by mintplant on Thursday August 25, 2022 @05:41PM (#32600292)
I think 'createdapril24 is referring to Oracle's broader data brokerage/marketplace business rather than strictly their on-premise database system business.

https://techcrunch.com/2022/08/22/oracle-us-privacy-class-ac...

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @04:27PM (#32599542)
Your data is in a piece of software controlled by Oracle. They can easily create a backdoor designed for NSA use. Whether they "have" your data on their hardware or not doesn't make much of a difference in this case.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by spullara on Thursday August 25, 2022 @04:41PM (#32599687)
Maybe don't connect your database to the internet? Which is the normal way to install it locally?
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @11:05PM (#32602920)
If you connect it to any network at all. Is it beyond the NSA to string together several obscure vulnerabilities to attack a specific target? [1]

I mean.. I suppose you could air gap your database, but of what utility is it to you now?

[1]: https://en.wikipedia.org/wiki/Stuxnet

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by tyingq on Thursday August 25, 2022 @06:03PM (#32600509)
There was a time when Oracle sort of worked that way. On-prem Oracle has mostly migrated to an appliance type model where phone-home is standard and almost mandatory. "Exadata".
[ Parent | on HN ]