News for hackers. Stuff that matters.

A comment on Oracle started as a CIA project (2014). Parent comment

Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @04:27PM (#32599542)
Your data is in a piece of software controlled by Oracle. They can easily create a backdoor designed for NSA use. Whether they "have" your data on their hardware or not doesn't make much of a difference in this case.
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by spullara on Thursday August 25, 2022 @04:41PM (#32599687)
Maybe don't connect your database to the internet? Which is the normal way to install it locally?
[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by akira2501 on Thursday August 25, 2022 @11:05PM (#32602920)
If you connect it to any network at all. Is it beyond the NSA to string together several obscure vulnerabilities to attack a specific target? [1]

I mean.. I suppose you could air gap your database, but of what utility is it to you now?

[1]: https://en.wikipedia.org/wiki/Stuxnet

[ Parent | on HN ]
Re:Oracle started as a CIA project (2014) by tyingq on Thursday August 25, 2022 @06:03PM (#32600509)
There was a time when Oracle sort of worked that way. On-prem Oracle has mostly migrated to an appliance type model where phone-home is standard and almost mandatory. "Exadata".
[ Parent | on HN ]