msgbartop
News, views, tips and tricks on Oracle and other fun stuff
msgbarbottom

Oracle Opens Registration for OpenWorld San Francisco 2006

Quoting from this Oracle press release:

Oracle today opened registration for Oracle OpenWorld(r) San Francisco 2006, to be held October 22-26 at Moscone Center. Additionally, attendees will also be able to register for a new program launching this year for developers, Oracle Develop. Oracle Develop will help attendees advance their development skills and expand their knowledge at expert-led, in-depth technical sessions, hands-on labs, advanced how-tos, and detailed tutorials. The event is expected to be Oracle’s largest to date, with over 41,000 participants.

How much does it cost to attend and how can I register? Answer.

Time flies quickly. Remember last year’s OpenWorld? I hope I can attend this year’s conference.

Filed in Oracle with Comments Off | Tags:


Bad Code Costing Oracle Millions

That’s what Mary Ann Davidson, chief security officer at Oracle said according to this InfoWorld article.

Her first response to the Oracle database being “unbreakable” was “What idiot dreamed this up?”. She also said that if civil engineers built bridges in the same fashion in which software developers write code, people would face the “blue bridge of death” every morning going to work.

So, there you go. Blame it all on software developers. Yes, I’m a software developer and yes I do turn a blind eye to good coding practices but only when I have to code “the quick and dirty” way because of tight deadlines that the business need imposes on me.

Given enough time and enough knowledge and experience, software developers can do miracles, don’t you think?

Filed in Oracle, Security, Technology with 8 Comments


About The BUILTIN, FIPSFLAG and INTERFACE Pragmas in Oracle

A few weeks ago I blogged about PRAGMAs in PL/SQL. As you all know, as of the current release of PL/SQL, we have 4 documented pragma directives: AUTONOMOUS_TRANSACTION, RESTRICT_REFERENCES, EXCEPTION_INIT and SERIALLY_REUSABLE.

Karl posted a comment to draw my attention to the fact that in the SYS.STANDARD PL/SQL package, Oracle uses three additional undocumented pragma directives: BUILTIN, FIPSFLAG and INTERFACE. Just to satisfy my curiosity, I tried to find more information about them. Here is what I found:

PRAGMA BUILTIN:

An example of its usage in the SYS.STANDARD PL/SQL package:

function SQLCODE return PLS_INTEGER;
  pragma BUILTIN('SQLCODE',45, 10, 0);

This is what Pete Finnigan wrote about it on Nov 22 2003:

I don’t know the exact mechanism for the pragma builtin keyword but the function is almost certainly implemented in C and would be called in the SQL engine directly so should be reasonably efficient.

PRAGMA FIPSFLAG:

An example of its usage in the SYS.STANDARD PL/SQL package:

function SQLERRM return varchar2;
 pragma FIPSFLAG('SQLERRM', 1452);

I could not find any meaningful information about this directive.

PRAGMA INTERFACE:

An example of its usage in the SYS.STANDARD PL/SQL package:

function pesacos(n NUMBER) return NUMBER;
 pragma INTERFACE (c,pesacos);

I found three sources of information about this INTERFACE directive:

  • The STANDARD Package description from chapter 1 of Oracle Built-in Packages book by Steven Feuerstein. Here is what he wrote:

    Here is the implementation of LIKE:

      function 'LIKE' (str varchar2, pat varchar2) return boolean is
      begin
        return peslik(str, pat);
      end;
    

    What is this peslik function? Ah, that is where, when, and how Oracle “cheats” (or, at least, makes the rest of us PL/SQL developers jealous):

      function peslik(str varchar2, pat varchar2) return boolean;
          pragma interface (c,peslik);
    

    The peslik function is a stub program for a callout to C.

  • PL/SQL wrap utility from Exploiting and Protecting Oracle paper by Pete Finnigan. Here is what he wrote:

Yes, that’s right most of PL/SQL and Oracle’s built in packages are written in ‘C’ and these ‘C’ functions are called through a different mechanism than the one used by user programs from Oracle 8. The syntax is as follows:

procedure do_something(a_var binary_integer, another_var binary_integer);
    pragma interface (C, do_a_c_function);  

PLS-00129: Pragma INTERFACE only supports C as its first argument

Cause: The first parameter passed to pragma INTERFACE specified a host language other than C. Currently, C is the only host language supported. The parameter might be misspelled, or the pragma syntax might be faulty (for example, a comma might be missing between two parameters).

Action: Check the spelling of the first parameter, which should be C, and make sure the proper syntax was used.

Now that you know about these undocumented pragma directives, what next? nothing. It’s just interesting to know that they exist and to see how Oracle implements calls to its built-in functions behind the scenes. There is however some mystery surrounding the use of PRAGMA FIPSFLAG. If you have any additional information, please share with the rest of us. Thanks.

Filed in Interesting Stuff, Oracle with 4 Comments | Tags: , ,


Essential (and free) Software Every Computer Should Have

As soon as you connect your computer to the Internet, or even when you install new software, you risk being hacked and infected with viruses. But you already know that.

You also know that in order to protect your computer, you need at least three things: a firewall, an antivirus and an antispyware. But did you know that you can have all three software tools for free? Here is what I use on my Windows XP:


Firewall: ZoneAlarm
Price: Free
Download: http://www.zonelabs.com/free_za_download/

avg.gif
Antivirus: AVG Anti-Virus
Price: Free
Download: http://free.grisoft.com/doc/2/lng/us/tpl/v5


Antispyware: Windows Defender
Price: Free
Download: http://www.microsoft.com/downloads/details.aspx?…

What do you use?

Filed in Security, Technology, Tips with 14 Comments | Tags: , , ,


15 Reasons Why Books Have Problems

books.jpg According to Jeff Jarvis, the book is an outmoded means of communicating information. He lists many problems with books. According to him, books:

  1. Are frozen in time without the means of being updated and corrected.
  2. Have no link to related knowledge, debates, and sources.
  3. Create, at best, a one-way relationship with a reader.
  4. Try to teach readers but don’t teach authors.
  5. Tend to be too damned long because they have to be long enough to be books.
  6. Limit how knowledge can be found because they have to sit on a shelf under one address.
  7. Are expensive to produce.
  8. Depend on scarce shelf space.
  9. Depend on blockbuster economics.
  10. Can’t afford to serve the real mass of niches.
  11. Aren’t searchable.
  12. Aren’t linkable.
  13. Have no metadata.
  14. Carry no conversation.
  15. Thrown out when there’s no space for them anymore. Print is where words go to die.

Of course, his ideas about books resulted in many comments. I summarize:

  1. Electronics simply can’t replace the tactile experience of reading a book.
  2. Smart authors have found ways to blend the print with the electronic to offer something more.
  3. Books need no batteries, no operating systems, no proprietary viewing clients, they have no software glitches, no format incompatibilities, and you can take them to the beach to read them lying in the sun.
  4. Any book printed today is searchable in Google Books or Amazon’s Search Inside the Book.
  5. Great books are timeless.
  6. Imagine reading Tolstoy with ads for eBay down the side.
  7. Books are for cozying up to the fireplace.
  8. You can’t beat the new book smell and the opening of never opened pages that’s damn right awesome.
  9. Writers deserve to be able to make money from their creations without fear that it’s going to be be copied duplicated and spread around without them earning a penny.
  10. The only thing that will stop physical book printing is when all the trees of the world are dead, and at that point I don’t think anyone of us will really care about reading anymore.
  11. Books and written materials have survived for hundreds and thousands of years. They are still readable. Do you think the electronic media will be around and readable in 400 years? Not likely.
  12. It is a good thing they are frozen in time. My only problem with the Internet is that it can never be clear-cut, because of the mixture of opinions and biases that make it up.
  13. Books provide the writer’s opinion, and nothing else. You don’t read a book to get a multitude of opinions, you read a book because you respect the writer and want to hear his/her opinion.
  14. The author is the one who learns the most from writing their book, because of all the knowledge they have to accumulate in order to make the book worth reading.
  15. When you buy a book, most of the time you get a CD of the book in PDF format.

I believe that both electronic and print media can, and will, coexist together in harmony without one replacing the other. I admit that I buy books less often than what I used to in the past. Usually I buy books for authors I know and I like. I subscribe to Safari Books Online mostly because I am online at least eight hours a day.

Even professionals who can be very good book authors shy away from writing a book because “the figures just don’t add up” especially that “these days, when you can self-publish on the Web, or publish your book as a PDF and sell it online, writing a book is not such a compelling deal”. Even my favorite author reads books on his Palm Pilot :) .

Filed in Books, Technology with 6 Comments | Tags:


That Fine Code

So, I was tasked with changing a simple ColdFusion application. The application was written by a former co-worker who was also a “ColdFusion developer”.

The application has an HTML form in a login.cfm page that submits to a login_action.cfm page.

Now, take a look at this login_action.cfm, what am I supposed to do? Go hang myself? The following is an exact copy/paste: (more…)

Filed in ColdFusion with 13 Comments | Tags:


Top ten tips for better password management

password.jpg

There is an article on Silicon.com about how companies can manage their passwords. The author offers the following tips for fostering a culture of secure and more effective password management:

  1. Passwords must not be written down.
  2. Passwords must be set. When the password is “ChangeMe”, then change it.
  3. Require as few passwords as possible. Balance how much password protection you need with how many passwords can reasonably be managed.
  4. Staff must change their passwords regularly. This limits the likelihood of old passwords, shared between colleagues in less-secure times, coming back to haunt you.
  5. Make new passwords new. Old password = “Rowanda1″. New password = “Rowanda2″. Not good.
  6. Avoid obvious words. Passwords must be more complex than a single word which can be hacked with a dictionary attack.
  7. Think long – but not too long. A password which consists of at least eight characters with a mix of upper case, lower case and numbers is a good start.
  8. Automate password changes. The process of making staff reset and choose secure passwords must also be automated.
  9. Educate staff. Ensure password policy is written into employment contracts and that all staff understand why and what that entails.
  10. Look at long-term solutions which will eventually replace passwords – such as biometrics.

I believe that most of the above applies to individuals as well. In fact, tip number 10 is already a reality for the average consumer like you and me. Search Google for “biometric password manager” to see what I mean.

Personally, I have tens of passwords I need to keep track of. Since I avoid writing passwords down and it is impossible for me to remember them all, I rely primarily on my password manager software and sometimes on my memory when I am faced with “Please enter your user name and password”. Maybe I should try this new APC Biometric Password Manager, or something similar.

Filed in Security, Technology with 8 Comments | Tags: , ,


Your personalized newspaper

infooverload.jpg Jessica Mintz from the Wall Street Journal wrote an article titled Me, Me, Me. The article presents a few websites that help keeping the deluge of online information easy to deal with by organizing and personalizing the news based on your interests.

The article mentions a few popular news websites like Rojo.com, Newsvine.com, Findory.com, Reddit.com, Digg.com and Memeorandum.com.

I believe, and I’m sure you do too, that there is too much information and too many sources of information. This overload of information leads you to make choices on what information you want to consume (topics that interest you) and how.

Since I am interested in Oracle and ColdFusion, I subscribe to many Oracle and ColdFusion blogs. I read these blogs via my feed Reader. For my other news, I unsubscribed from all the Google News feeds, and I just started to use Findory.com. From their Help section:

Findory brings you news articles from thousands of worldwide sources. We build a personalized newspaper for each reader. The more articles you click on, the more personalized Findory will look. Our Personalization Technology adapts the website to show you interesting and relevant news based on your reading habits. There is too much news out there for anybody to keep up. We’re here to help. Sound complicated? It isn’t. Findory is really easy to use: just click on the articles which interest you. We’ll do the rest. No signup, no complicated configuration.

Findory was founded in 2004 by Greg Linden, the engineer behind Amazon’s recommendations engine.

There are many news stories I could care less about. Findory offers exactly what I need, a personalized newspaper. It also has a clean, clutter free interface, which I like too.

How do you keep up with the flood of information? What is your favourite news website? How and when do you read your daily news?

Filed in Interesting Stuff, Technology with Comments Off | Tags:


Oracle 8i, 9i and 10g Trends

Google Trends Logo In case you do not know yet, Google recently introduced Google Trends. What is Google Trends? it analyzes a portion of Google web searches to compute how many searches have been done for the terms you enter relative to the total number of searches done on Google over time.

You know that Oracle database version 8i is getting extinct and 9i is, slowly but surely, being replaced with 10g. But now, you can actually see how Google web searches reflect this trend, using Google Trends:

Google Trends - Oracle 10g, 9i and 8i

Filed in Google, Oracle with 3 Comments | Tags:


What’s new is important

What is the first thing you do when a new version of an Oracle database (or any software) is released? You immediately look for the “what’s new” document, right?

I believe that the “What’s new” document is very important because it informs you of new (or modified) features that is supposed to make your life easier and your applications more powerful.

Take advantage of “what’s new”. After all, you’re paying for these new features (I assume), so use them or lose them.

To that end, here is a list of “what’s new” links. They will take you straight to the corresponding section of the Oracle documentation:

What’s new in Oracle Database version:

What’s new in SQL in Oracle Database version:

What’s new in PL/SQL in Oracle Database version:

Here is a list of useful “What’s new” articles:

Filed in Oracle, Tips with 3 Comments | Tags: , , ,