Database Reference
In-Depth Information
Some people might find it amusing to consider a large estate with many databases and users all logging on with
their passwords not realizing that authentication is actually not taking place and the passwords are not actually being
processed. It would be an interesting experiment to see for how long that situation could last. Additionally, from a
hacker's perspective, turning off password checking could be a philosophical statement regarding authority and
control. Therefore it is worth checking to make sure that the wrong passwords do not gain entrance, i.e., that auth is
actually turned on. This is not a standard check but is worth adding for completeness. The above PoC code is for the
Windows platform.
It should be said that oradebug is also a very helpful tool for changing static parameters without restart, thus
enabling HA, which is possibly why Oracle has preserved the above functionality in 12c, as we shall investigate
in Chapter 9. Before that, let's consider where the trends we have followed from the historical Chapter 1, to the
contemporary Chapter 2, are likely to extend in the future.
