<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Pythian Blog &#187; passwords</title>
	<atom:link href="http://www.pythian.com/news/tag/passwords/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pythian.com/news</link>
	<description>News and views from Pythian DBAs</description>
	<lastBuildDate>Fri, 10 Feb 2012 09:54:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>My Two Cents on MySQL Password Security</title>
		<link>http://www.pythian.com/news/2730/my-two-cents-on-mysql-password-security/</link>
		<comments>http://www.pythian.com/news/2730/my-two-cents-on-mysql-password-security/#comments</comments>
		<pubDate>Fri, 05 Jun 2009 20:32:49 +0000</pubDate>
		<dc:creator>Gerry Narvaja</dc:creator>
				<category><![CDATA[MySQL]]></category>
		<category><![CDATA[grant]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[show grants]]></category>

		<guid isPermaLink="false">http://www.pythian.com/news/?p=2730</guid>
		<description><![CDATA[Lenz Grimmer recently wrote two blogs about password security on MySQL. Both are worth reading in detail. You&#8217;ll find them in Basic MySQL Security: Providing passwords on the command line and More on MySQL password security. Although I wrote a comment on the latter one, there is one point I thought was worth its own [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/2730/my-two-cents-on-mysql-password-security/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Pop Quiz:  MySQL Password Hashing</title>
		<link>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/</link>
		<comments>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/#comments</comments>
		<pubDate>Mon, 24 Mar 2008 15:23:07 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[ACL]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[login]]></category>
		<category><![CDATA[old_passwords]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/885/pop-quiz-mysql-password-hashing</guid>
		<description><![CDATA[The answers to the last pop quiz are up: http://www.pythian.com/blogs/868/pop-quiz-mysql-cluster So here&#8217;s another pop quiz. Given the following: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 16450949 to server version: 4.1.14-standard-log Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> select count(*),length(password) from [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Does MySQL Send Passwords In the Clear?</title>
		<link>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/</link>
		<comments>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 23:04:21 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[MySQL]]></category>
		<category><![CDATA[cleartext]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/882/does-mysql-send-passwords-in-the-clear</guid>
		<description><![CDATA[I was asked this question recently, and I thought it was a great little tidbit of knowledge to pass along. The short answer is &#8220;no&#8221;. The slightly longer answer was written up by Jan Kneschke when dealing with a forum post about proxy + connection pooling. From http://forums.mysql.com/read.php?146,169265,169700 The clear-text password is _never_ transfered in [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Oracle Grid Control: The Importance of Deleting the emkey</title>
		<link>http://www.pythian.com/news/736/oracle-grid-control-the-importance-of-deleting-the-emkey/</link>
		<comments>http://www.pythian.com/news/736/oracle-grid-control-the-importance-of-deleting-the-emkey/#comments</comments>
		<pubDate>Thu, 13 Dec 2007 21:08:16 +0000</pubDate>
		<dc:creator>Grégory Guillou</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[emkey]]></category>
		<category><![CDATA[Grid Control]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/736/oracle-grid-control-the-importance-of-deleting-the-emkey</guid>
		<description><![CDATA[Disclaimer: In most countries, looking at user passwords is illegal. Never try what is written below on a system that somebody other than you can access. Oracle Grid Control documentation warns against leaving the emkey in the Grid Control repository. It says here: After the emkey has been copied, you must remove it from the [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/736/oracle-grid-control-the-importance-of-deleting-the-emkey/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Using DBMS_SYS_SQL to Execute Statements as Another User</title>
		<link>http://www.pythian.com/news/652/using-dbms_sys_sql-to-execute-statements-as-another-user/</link>
		<comments>http://www.pythian.com/news/652/using-dbms_sys_sql-to-execute-statements-as-another-user/#comments</comments>
		<pubDate>Mon, 05 Nov 2007 18:12:45 +0000</pubDate>
		<dc:creator>Alex Fatkulin</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[dbms_sql]]></category>
		<category><![CDATA[dbms_sys_sql]]></category>
		<category><![CDATA[passwords]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/652/using-dbms_sys_sql-to-execute-statements-as-another-user</guid>
		<description><![CDATA[I do realize that for most of you, there may be nothing new about the dbms_sys_sql package â€“ knowledge of it has been floating around for quite a while. I myself discovered this package a couple of years ago while playing around with HTMLDB&#8217;s (now APEX&#8217;s) internals. I&#8217;m posting this as a response to a [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/652/using-dbms_sys_sql-to-execute-statements-as-another-user/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

