Quoting from this Oracle press release:
Oracle today opened registration for Oracle OpenWorld(r) San Francisco 2006, to be held October 22-26 at Moscone Center. Additionally, attendees will also be able to register for a new program launching this year for developers, Oracle Develop. Oracle Develop will help attendees advance their development skills and expand their knowledge at expert-led, in-depth technical sessions, hands-on labs, advanced how-tos, and detailed tutorials. The event is expected to be Oracle’s largest to date, with over 41,000 participants.
How much does it cost to attend and how can I register? Answer.
Time flies quickly. Remember last year’s OpenWorld? I hope I can attend this year’s conference.
Filed in Oracle with Comments Off | Tags: OpenWorldThat’s what Mary Ann Davidson, chief security officer at Oracle said according to this InfoWorld article.
Her first response to the Oracle database being “unbreakable” was “What idiot dreamed this up?”. She also said that if civil engineers built bridges in the same fashion in which software developers write code, people would face the “blue bridge of death” every morning going to work.
So, there you go. Blame it all on software developers. Yes, I’m a software developer and yes I do turn a blind eye to good coding practices but only when I have to code “the quick and dirty” way because of tight deadlines that the business need imposes on me.
Given enough time and enough knowledge and experience, software developers can do miracles, don’t you think?
Filed in Oracle, Security, Technology with 8 CommentsA few weeks ago I blogged about PRAGMAs in PL/SQL. As you all know, as of the current release of PL/SQL, we have 4 documented pragma directives: AUTONOMOUS_TRANSACTION, RESTRICT_REFERENCES, EXCEPTION_INIT and SERIALLY_REUSABLE.
Karl posted a comment to draw my attention to the fact that in the SYS.STANDARD PL/SQL package, Oracle uses three additional undocumented pragma directives: BUILTIN, FIPSFLAG and INTERFACE. Just to satisfy my curiosity, I tried to find more information about them. Here is what I found:
An example of its usage in the SYS.STANDARD PL/SQL package:
function SQLCODE return PLS_INTEGER;
pragma BUILTIN('SQLCODE',45, 10, 0);
This is what Pete Finnigan wrote about it on Nov 22 2003:
I don’t know the exact mechanism for the pragma builtin keyword but the function is almost certainly implemented in C and would be called in the SQL engine directly so should be reasonably efficient.
An example of its usage in the SYS.STANDARD PL/SQL package:
function SQLERRM return varchar2;
pragma FIPSFLAG('SQLERRM', 1452);
I could not find any meaningful information about this directive.
An example of its usage in the SYS.STANDARD PL/SQL package:
function pesacos(n NUMBER) return NUMBER;
pragma INTERFACE (c,pesacos);
I found three sources of information about this INTERFACE directive:
The STANDARD Package description from chapter 1 of Oracle Built-in Packages book by Steven Feuerstein. Here is what he wrote:
Here is the implementation of LIKE:
function 'LIKE' (str varchar2, pat varchar2) return boolean is
begin
return peslik(str, pat);
end;
What is this peslik function? Ah, that is where, when, and how Oracle “cheats” (or, at least, makes the rest of us PL/SQL developers jealous):
function peslik(str varchar2, pat varchar2) return boolean;
pragma interface (c,peslik);
The peslik function is a stub program for a callout to C.
PL/SQL wrap utility from Exploiting and Protecting Oracle paper by Pete Finnigan. Here is what he wrote:
Yes, that’s right most of PL/SQL and Oracle’s built in packages are written in ‘C’ and these ‘C’ functions are called through a different mechanism than the one used by user programs from Oracle 8. The syntax is as follows:
procedure do_something(a_var binary_integer, another_var binary_integer);
pragma interface (C, do_a_c_function);
PLS-00129: Pragma INTERFACE only supports C as its first argument
Cause: The first parameter passed to pragma INTERFACE specified a host language other than C. Currently, C is the only host language supported. The parameter might be misspelled, or the pragma syntax might be faulty (for example, a comma might be missing between two parameters).
Action: Check the spelling of the first parameter, which should be C, and make sure the proper syntax was used.
Now that you know about these undocumented pragma directives, what next? nothing. It’s just interesting to know that they exist and to see how Oracle implements calls to its built-in functions behind the scenes. There is however some mystery surrounding the use of PRAGMA FIPSFLAG. If you have any additional information, please share with the rest of us. Thanks.
Filed in Interesting Stuff, Oracle with 4 Comments | Tags: fips, pragma, undocumentedAs soon as you connect your computer to the Internet, or even when you install new software, you risk being hacked and infected with viruses. But you already know that.
You also know that in order to protect your computer, you need at least three things: a firewall, an antivirus and an antispyware. But did you know that you can have all three software tools for free? Here is what I use on my Windows XP:

Firewall: ZoneAlarm
Price: Free
Download: http://www.zonelabs.com/free_za_download/
![]()
Antivirus: AVG Anti-Virus
Price: Free
Download: http://free.grisoft.com/doc/2/lng/us/tpl/v5
![]()
Antispyware: Windows Defender
Price: Free
Download: http://www.microsoft.com/downloads/details.aspx?…
What do you use?
Filed in Security, Technology, Tips with 14 Comments | Tags: antispyware, antivirus, firewall, software
According to Jeff Jarvis, the book is an outmoded means of communicating information. He lists many problems with books. According to him, books:
Of course, his ideas about books resulted in many comments. I summarize:
I believe that both electronic and print media can, and will, coexist together in harmony without one replacing the other. I admit that I buy books less often than what I used to in the past. Usually I buy books for authors I know and I like. I subscribe to Safari Books Online mostly because I am online at least eight hours a day.
Even professionals who can be very good book authors shy away from writing a book because “the figures just don’t add up” especially that “these days, when you can self-publish on the Web, or publish your book as a PDF and sell it online, writing a book is not such a compelling deal”. Even my favorite author reads books on his Palm Pilot
.
So, I was tasked with changing a simple ColdFusion application. The application was written by a former co-worker who was also a “ColdFusion developer”.
The application has an HTML form in a login.cfm page that submits to a login_action.cfm page.
Now, take a look at this login_action.cfm, what am I supposed to do? Go hang myself? The following is an exact copy/paste: (more…)
Filed in ColdFusion with 13 Comments | Tags: programming![]()
There is an article on Silicon.com about how companies can manage their passwords. The author offers the following tips for fostering a culture of secure and more effective password management:
I believe that most of the above applies to individuals as well. In fact, tip number 10 is already a reality for the average consumer like you and me. Search Google for “biometric password manager” to see what I mean.
Personally, I have tens of passwords I need to keep track of. Since I avoid writing passwords down and it is impossible for me to remember them all, I rely primarily on my password manager software and sometimes on my memory when I am faced with “Please enter your user name and password”. Maybe I should try this new APC Biometric Password Manager, or something similar.
Filed in Security, Technology with 8 Comments | Tags: password, Security, software
Jessica Mintz from the Wall Street Journal wrote an article titled Me, Me, Me. The article presents a few websites that help keeping the deluge of online information easy to deal with by organizing and personalizing the news based on your interests.
The article mentions a few popular news websites like Rojo.com, Newsvine.com, Findory.com, Reddit.com, Digg.com and Memeorandum.com.
I believe, and I’m sure you do too, that there is too much information and too many sources of information. This overload of information leads you to make choices on what information you want to consume (topics that interest you) and how.
Since I am interested in Oracle and ColdFusion, I subscribe to many Oracle and ColdFusion blogs. I read these blogs via my feed Reader. For my other news, I unsubscribed from all the Google News feeds, and I just started to use Findory.com. From their Help section:
Findory brings you news articles from thousands of worldwide sources. We build a personalized newspaper for each reader. The more articles you click on, the more personalized Findory will look. Our Personalization Technology adapts the website to show you interesting and relevant news based on your reading habits. There is too much news out there for anybody to keep up. We’re here to help. Sound complicated? It isn’t. Findory is really easy to use: just click on the articles which interest you. We’ll do the rest. No signup, no complicated configuration.
Findory was founded in 2004 by Greg Linden, the engineer behind Amazon’s recommendations engine.
There are many news stories I could care less about. Findory offers exactly what I need, a personalized newspaper. It also has a clean, clutter free interface, which I like too.
How do you keep up with the flood of information? What is your favourite news website? How and when do you read your daily news?
Filed in Interesting Stuff, Technology with Comments Off | Tags: News
In case you do not know yet, Google recently introduced Google Trends. What is Google Trends? it analyzes a portion of Google web searches to compute how many searches have been done for the terms you enter relative to the total number of searches done on Google over time.
You know that Oracle database version 8i is getting extinct and 9i is, slowly but surely, being replaced with 10g. But now, you can actually see how Google web searches reflect this trend, using Google Trends:
Filed in Google, Oracle with 3 Comments | Tags: GoogleWhat is the first thing you do when a new version of an Oracle database (or any software) is released? You immediately look for the “what’s new” document, right?
I believe that the “What’s new” document is very important because it informs you of new (or modified) features that is supposed to make your life easier and your applications more powerful.
Take advantage of “what’s new”. After all, you’re paying for these new features (I assume), so use them or lose them.
To that end, here is a list of “what’s new” links. They will take you straight to the corresponding section of the Oracle documentation:
What’s new in Oracle Database version:
What’s new in SQL in Oracle Database version:
What’s new in PL/SQL in Oracle Database version:
Here is a list of useful “What’s new” articles: