Percona just released their MySQL PAM
Authentication insanity, just as Oracle did before, for MySQL 5.5 and MariaDB is no better.
The Oracle module requires a module to be loaded into your
client, which is done automatically if the module is present and
the server supports PAM auth. The module is called ominously
"mysql_clear_password" and does what it says on the tin: Your
database server access password is henceforth sent from the
client to the server in clear, not encrypted, hashed, salted or
otherwise protected.
I suppose the Percona module does the same, although it is not
being mentioned in the docs at all (or at least I have not …
The latest from the MySQL community
Ideas, releases, practical guides, and perspectives from the people building with MySQL.
This week we have a big announcement about Sarah, 3 hosts and an extra special guest.
News
Call for papers for Percona Live: MySQL Conference & Expo 2012 is
open until Monday, December 5th. The MySQL Conference & Expo is
Tuesday April 10 - Thursday, April 12, 2012 in Santa Clara, CA.
To submit a paper, first register as a speaker at http://www.percona.com/live/mysql-conference-2012/user/register and then go to My Account -> Submit Proposal.
Main content
Previous podcasts about securing MySQL
Linux, Apache, MySQL and PHP — altogether they mean LAMP. I’m not talking about watts and bulbs.
And if you desire is for a comprehensive, robust server, your IT infrastructure has to include all of these systems.
Monitis has put together a checklist of 101 actions you can take to maximize security around LAMP. Hopefully we’re shedding a little light around this issue for you to give you some new ideas on how to make administering your system easier — so that, in turn, you can focus on more strategic tasks. You …
[Read more]With the recent cyber attacks and breaches with data from large organizations including Sony, is your MySQL data safe? What are the best practices for securing and administering your MySQL environment? In this presentation we will cover the essential steps for better MySQL security. We will also cover the different installation and administration tasks necessary to ensure your data is managed.
Presenter: Ronald Bradford
Schedule: Insight Out DB Showcase. October 2011 …
We go over the open calls for papers, upcoming conferences, conversations with Oracle, and finish up our 2-part series on MySQL security.
Calls for papers:
Call for papers for Percona Live: MySQL Conference & Expo 2012 is
open! They opened it on Friday, September 15th and the call will
close on Monday, December 5th. The MySQL Conference & Expo is
Tuesday April 10 - Thursday, April 12, 2012 in Santa Clara, CA.
To submit a paper, first register as a speaker at http://www.percona.com/live/mysql-conference-2012/user/register and then go to My Account -> Submit Proposal.
News/Feedback
Collaborate Call for papers is open until Sunday October 14th -
http://events.ioug.org/p/cm/ld/fid=15
Collaborate is an Oracle Technology and Applications conference
put on by IOUG, OAUG and Quest. It is the largest independent
Oracle conference, and we are planning on having a one-day track
there. Collaborate is at the Mandalay Bay Convention Center in
Las Vegas, Nevada from Sunday April 22nd - Thursday 26th, 2012.
Call for papers for Percona Live: MySQL Conference & Expo 2012 is open! They opened it on Friday, September 15th and the call will close on Monday, December 5th. The MySQL Conference & Expo is Tuesday April 10 - Thursday, October 12, 2012 in Santa Clara, CA.
As per amorize.com MySQL.com was hacked and quote “infecting visitors with malware” .. true or false? …
More reading at krebsonsecurity.com too.
I'm looking forward to the upcoming Message Systems User Conference next month in San Francisco, not only for what looks like an excellent venue, but for the great set of quality sessions on the agenda.
There's a number of sessions I'm looking forward to attending, but I'd like to invite you to attend the sessions I'll be delivering next month (read to the end to save on conference admission):
What the Convergence of Data Security & Privacy Concerns Will Mean to Companies
The barrage of news stories about data breaches and privacy violations is taking a toll on consumer confidence.
What You'll Learn:
- Why data security …
MySQL 5.5 GA and MySQL 5.6 Development Milestone Releases have
delivered many new compelling features to the MySQL users and
community for testing, feedback and use.
In addition, commercial customers have access to a number of
commercial extensions already included in MySQL
Enterprise Edition:
• MySQL Enterprise Monitor
• MySQL Enterprise Backup
Continuing the business model of MySQL, we are adding three new
commercial extensions to MySQL Enterprise Edition:
- MySQL Enterprise Scalability
- Thread Pool …
MySQL 5.5 GA and MySQL 5.6 Development Milestone Releases have
delivered many new compelling features to the MySQL users and
community for testing, feedback and use.
In addition, commercial customers have access to a number of
commercial extensions already included in MySQL
Enterprise Edition:
• MySQL Enterprise Monitor
• MySQL Enterprise Backup
Continuing the business model of MySQL, we are adding three new
commercial extensions to MySQL Enterprise Edition:
- MySQL Enterprise Scalability
- Thread Pool …