Thierry Zoller informed us about four possible privilege escalations in XAMPP for Windows. Thierry, thank you very much for notifying us of this problem.

The problem occurs if the installation path of XAMPP for Windows contains a blank character (like in C:\Program files\XAMPP) and you're creating a file named C:\Program.exe. In this case you will be able (for example) to catch the starting FileZilla service and start your own program (C:\Program.exe) as a service.

To exploit this vulnerability an attacker already needs full access to your C:\ directory to create the needed C:\Program.exe file.

Thierry found three other scenarios within this bug will appear. To find out more details about this problem please take a look into Thierry's Blog.

Update May 9th 2006
The current …

The Melbourne MySQL User Group May Meetup - The Melbourne MySQL User Group - Meetup.com

We’re going to be going over cool stuff that happenned at the MySQL User Conference. Tales will be told, photos shown and questions answered.

MySQL's unique Pluggable Storage Engine Architecture gives users the flexibility to choose from a potfolio of purpose-built storage engines that are optimized for specific application domains - OLTP, Read-Intensive Web Scale-out, High-Availability Clustering, Data Archiving, Data Warehousing, and more.

Mike Zinner and team have put an absolutely wonderful set of tutorials on MySQL Forge targeted at understanding and extending the GUI Tools platform. The first article, MySQL Workbench Scripting, gives you a quick introduction on how to write scripts for the MySQL Workbench tool, complete with sample Lua code in zip files. The second article focuses on writing plugins for MySQL Workbench.

OK, so here is the challenge to the community. The first one of you to write a useful, documented plugin for MySQL Workbench and post it into the Forge will get a signed copy of Pro MySQL and …

The 2nd Monday of the month is already here which means tonight is the Boston MySQL Meetup. Jacob Nikom from MIT Lincoln Labs is giving a presentation entitled Measuring MySQL Server Performance for the Sensor Data Stream Processing.

I attended Jacob's session at the MySQL UC. It's pretty amazing the amount of data they are processing and the depth that they went to get performance benchmarks across multiple versions of MySQL.

If you aren't in town, or can't make it this month, I've got the camera batteries charging and will post the video later this week.

Start of a new blog for only my MySQL stuff.

For a migration, I needed a latin1_german1_cs collation, that is, I needed German umlauts to sort as their base characters.

Here is what to do: Find your charsets directory with "SHOW VARIABLES LIKE 'char%dir%'".

Inside that directory will be a file Index.xml. Find a free id and add your new collation using an unused id. Add a description and a name.

Inside the same directory is a file latin1.xml. Inside that file, copy the block of the collation matching your new collation most closely, and adapt it as needed. In my case, I changed latin1_german1_ci to _cs, and modified the character values to match.

Patch attached after the break.

How to use:

After applying the patch, the server must be restarted. "SHOW COLLATION" will now show the new latin1_german1_cs collation. "ALTER TABLE t CHANGE COLUMN oldcol newcol varchar(80) CHARSET latin1 COLLATE …

It gives us great pride to announce the release of MyComponents V4.4 native Delphi/Kylix VCL suite. This update includes mainly fixes to issues as it has been reported to Support and on this and other forums.

What's new?

TMySQLDataset:
New: RemObjects' DataAbstract driver 3 and 4 API included.
Fix: Various issues as has been reported to SciBit Support

This update is free of charge for all customers whom own a 2005.4.x MyComponents serial. Everyone still using a pre-2005.4 MyComponents may upgrade to the newest version by logging into their Secure accounts: simply click the Secure link at the top of this page.

Previous articles concerning MyComponents 4.x are:
…

A Googly MySQL Cluster Talk - Google Video

The talk I gave at Google is now up on Google Video for all to see. I don’t think I gave it as well as I did at the User Conference (largely because, I think, by this time I was really tired), but it still went well (I think).

Feedback is much appreciated - always looking for ways to improve my talks.

Oh, I’m also wearing an Augie March t-shirt.

Update: watching yourself give a presentation is a bit strange… but hopefully I can learn from watching my own talk.

Things I’ve learnt so far:

• some words are spoken a bit quickly/mumbly. probably due to not knowing how long this presentation would go for (it was a bit cobbled together in the two sessions …

In this photo: Gallery :: MySQL Users Conference 2006 :: 3 it seems that Jeremy managed to capture me (in the background) explaining to the O’Reilly conference woman (I forget her name…. Arjen knows) that it really wasn’t too hard for them to get me lunch considering that inside the building the restaurant staff managed to get food for me (so why can’t they do it outside). I also expressed my dismay at my interaction with the staff around an (afternoon/morning… i forget now) interaction involving a request for an apple (see “How not …