This small article is a reaction for those convincing me that authentication+authorization policy inside database provides you ultimate data protection \ud83d\ude42 You don\u00b4t want to pay for Oracle Advanced Security, you\u00b4re not compressing data and you feel that your data are safe (according strict access policy in database). Well, you must be joking apparently! \ud83d\ude42<\/p>\n
<\/p>\n
Let\u00b4s have a sample table with 20 records consisting of visa credit card numbers:<\/p>\n
<\/p>\n
I\u00b4m system power user and still curious if I can dig some „gold“ from data persisting in data files. Let\u00b4s try something! First step = find where data are stored.<\/p>\n
[oracle@ol65 orcl]$ ll<\/strong><\/span><\/span> Well, nothing interesting, just few dbf file. But consider, maybe all is stored there. It begins to be interesting if you\u00b4re familiar with strings command and basic knowledge of regular expressions (time is just informing about speed on my laptop):<\/p>\n [oracle@ol65 orcl]$ real\u00a0\u00a0 \u00a00m4.653s<\/span> As you can see, few seconds on laptop\u00b4s disk is perfect result, can imagine much more faster on servers storages. And of course I chose credit card numbers – because valid cc number is still valuable in a black market \ud83d\ude42<\/p>\n Pay for Oracle Enterprise and consider if your data are automatically<\/strong> in bulletproof vault \ud83d\ude09<\/p>\n -a-<\/p>\n","protected":false},"excerpt":{"rendered":" This small article is a reaction for those convincing me that authentication+authorization policy inside database provides you ultimate data protection \ud83d\ude42 You don\u00b4t want to pay for Oracle Advanced Security, you\u00b4re not compressing data and you feel that your data … Continue reading
\ntotal 2738040<\/span>
\n-rw-r—– 1 oracle oinstall\u00a0\u00a0 9748480 Jan 27 15:53 control01.ctl<\/span>
\n-rw-r—– 1 oracle oinstall 104865792 Jan 27 09:07 example01.dbf<\/span>
\n-rw-r—– 1 oracle oinstall\u00a0 52429312 Jan 27 15:53 redo01.log<\/span>
\n-rw-r—– 1 oracle oinstall\u00a0 52429312 Jan 27 09:07 redo02.log<\/span>
\n-rw-r—– 1 oracle oinstall\u00a0 52429312 Jan 27 09:07 redo03.log<\/span>
\n-rw-r—– 1 oracle oinstall 545267712 Jan 27 15:53 sysaux01.dbf<\/span>
\n-rw-r—– 1 oracle oinstall 828383232 Jan 27 15:53 system01.dbf<\/span>
\n-rw-r—– 1 oracle oinstall 112205824 Jan 22 13:09 temp01.dbf<\/span>
\n-rw-r—– 1 oracle oinstall 723525632 Jan 27 15:53 undotbs01.dbf<\/span>
\n-rw-r—– 1 oracle oinstall 322445312 Jan 27 15:42 users01.dbf<\/span>
\n[oracle@ol65 orcl]$ pwd<\/strong><\/span><\/span>
\n\/u01\/app\/oracle\/oradata\/orcl<\/span><\/p>\ntime strings -a users01.dbf | grep \"[0-9]\\{4\\}\\-[0-9]\\{4\\}\\-[0-9]\\{4\\}\\-[0-9]\\{4\\}\"<\/code><\/strong><\/span><\/span>
\n4255-8613-9716-5076,<\/span>
\n4531-2930-4967-2232,<\/span>
\n4548-7929-1826-4899,<\/span>
\n4691-3746-9407-0405,<\/span>
\n4649-1103-3295-2551,<\/span>
\n4997-5257-8004-9774,<\/span>
\n4692-4078-2653-8573,<\/span>
\n4044-8832-9347-1412,<\/span>
\n4688-8299-4664-4385,<\/span>
\n4339-4136-0219-4499,<\/span>
\n4016-7845-2950-8098,<\/span>
\n4961-6591-9364-9979,<\/span>
\n4787-0768-3223-3820,<\/span>
\n4582-2114-8843-1397,<\/span>
\n4549-3001-8407-0658,<\/span>
\n4464-3676-8558-3399,<\/span>
\n4804-1261-5366-8044,<\/span>
\n4284-1059-8455-5702,<\/span>
\n4127-1856-7120-0292,<\/span>
\n4633-7926-0863-2443<\/span><\/p>\n
\nuser\u00a0\u00a0 \u00a00m2.857s<\/span>
\nsys\u00a0\u00a0 \u00a00m1.678s<\/span><\/p>\n