Skip to content

Security

Keep Your Software’s Up to Date with Zabbix

Monitoring tools are increasingly going beyond their usual perimeter of just monitoring metrics. Modern tools, like Zabbix, can watch files for any change and raise warning whenever it occurs. An example I found the “Linux by Zabbix agent” template: Computing the /etc/passwd checksum and raise an alert if it changes. In this blog post, I will explain how to get… 

SQL FIREWALL

This blog comes to complete the excellent blog written by my colleague Gregory Steulet on the same topic. SQL FIREWALL is a new security layer integrated into Oracle Database 23c. First, we create a admin user for which we grant it a new admin privilege “sql_firewall_admin”: We enable the SQL FIREWALL: We create a capture process on the user LFE:… 

Swiss Cloud Native day landed at the Gurten!

On the 21st of September this year, we attended the Swiss Cloud Native Day. I was accompanied by two of my colleagues, Arnaud Berbier and Christoph Bernhard. This event took place for the third time, and this year, it landed in Bern at the Gurten. Surrounding the capital, Mount Gurten is reachable after 11 minutes of funicular. It’s definitely a… 

Oracle to the rescue of MGM with SQL Firewall?

Introduction It is true that it’s a somewhat daring title, and it’s unlikely that SQL firewall has changed anything about the attack that several casinos in Las Vegas suffered last week. However, the opportunity was too good to pass up on this topic. As I write this blog, Las Vegas casinos are experiencing a series of cyberattacks. It turns out… 

MGM got hacked

JBoss EAP 7 – Use vault to protect passwords

JBoss EAP simplifies a lot of server configuration by consolidating all subsystem configurations into a single XML file (standalone.xml or domain.xml). This, however, can expose sensitive information to any user that has access to the configuration files. For example, datasource credentials are by default stored in plain text in the XML file. In this blog I will show you how… 

KubeCon / CloudNativeCon 2023 – Day 3

Today is the last day of conferences. It is unexpected but I get fitter and fitter as I walk between 4 and 5 kilometre each day from one session to another. The RAI Amsterdam Convention Centre is huge and when finally on the last day you have the map of it in the head and know all the shortcuts, it… 

KubeCon / CloudNativeCon 2023 – Day 2

Here we are with Arnaud Berbier, up for our second conference day! You can check my blog for Day 1 if you’ve missed it. Keynote sessions Like yesterday, we started with a bunch of Keynote sessions from highly skilled speakers from the big Silicon Valley companies we all know about. It feels very much like an American show with lights… 

KubeCon / CloudNativeCon 2023 – Day 1

Day 0 warm up! We arrived yesterday with my colleague Arnaud Berbier in Amsterdam for the KubeCon / CloudNativeCon but also the first CiliumCon 2023. All those events are grouped together. Thank you dbi services for this very great opportunity! We’ve carefully prepared our Schedule to make the most of it. There are a lot of sessions of various style… 

Oracle TDE part II : Encrypting Data

By Mouhamadou Diaw In the first part of this blog, we activate TDE in the database, in this part we will see how we can encrypt data. I am using Oracle 19c for the tests As specified before TDE will allow encryption at 2 levels -Tablespace level -Table column level TDE will encrypt your data in rest at filesystem level.… 

AWS re:Invent day 2: All about Lakes

As usual the day 2 with Adams Selipsky’s keynote is where most announcements are done…and they have been severals. As you will probably see plenty of articles about these, and by the way I recommend you to take few minutes for the one of @nicolas-jardot, on my hand I will focus on auditing and compliance by showing how you can… 

DevOps Barcelona – Day1

It was the first time that I assist to an IT conference, and I want first to say a warm thank to dbi services for this great opportunity. DevOps Barcelona is an annual event that purpose multiple conferences on different subjects around the marvelous word of DevOps. After received our welcome gifts and a coffee, lets start our two days… 

SQL Server 2022 security: Do you know Ledger?

You probably hear or view that on the security point of view, the next version of SQL Server: SQL Server 2022, has a feature named Ledger. It’s already used in Azure but what is Ledger? In 2 points, I will say: Ledger helps streamline audits, providing cryptographic proof of data integrity to auditors. Ledger is also a protection of the…