Profile avatar
martinchadderton.bsky.social
Software Architect specialising in Oracle (OCA, OCP and OCE), Python, Lua, Javascript, Linux, Pentesting, DevSecOps and Retro Computing
7 posts 21 followers 34 following
Regular Contributor

Do you like to point fingers at "wrong"? Ask what can go wrong, instead, before it's too late! Play OWASP Cornucopia! The waiting time is over. OWASP® Cornucopia Website App 2.1 & Mobile App 1.1 have been released! see: dev.to/owasp/owaspr... #appsec #cybersec #threatmodeling #owasp

Today's fun discovery ALTER SESSION DISABLE COMMIT IN PROCEDURE => if a PL/SQL procedure has a commit it raises an ORA-00034 instead! => you can rollback across PL/SQL calls with commits Note: DML in the proc is rolled back unless you catch the ORA-34 This "new" feature is at least 20 years old!

The waiting time is over. OWASP® Cornucopia Website App 2.1 & Mobile App 1.1 have been released! see: dev.to/owasp/owaspr... Want developers to do threat modeling? Don't do all the heavy lifting! Play OWASP Cornucopia! The 2.1 release is here! #appsec #threatmodeling #cybersec #owasp

Use dot-notation to access attributes of stored #JSON with Oracle #SQL SELECT tab.jcol.attr This returns a JSON data type => implicit conversions & poor plans Use type methods to cast the value and avoid these problems SELECT tab.jcol.attr.number() @salvis.com demos

6.12.8: stable Version: 6.12.8 (stable) Released: 2025-01-02 Source: linux-6.12.8.tar.xz PGP Signature: linux-6.12.8.tar.sign Patch: full ( incremental ) ChangeLog: ChangeLog-6.12.8 https://www.kernel.org #linux #kernel

Recommended reading for Oracle Database Deep dive on Binary JSON formats (the first in a series) from @loiclefevre.bsky.social medium.com/db-one/jsonb...

Checking if rows match some criteria? Instead of SELECT COUNT(*) FROM ... Use EXISTS ( SELECT * FROM ... COUNT gets all the rows; EXISTS can stop when it finds a match As @lukaseder.bsky.social says Thou shalt not use COUNT(*) when EXISTS sufficeth thy need

NEW VID! The 2nd half of my look at Atari's Unreleased Arcade Games. This one goes from 1985 to 2000 and there's all sorts of interesting stuff, from the cancelled Primal Rage and Marble Madness II to Beavis and Butt-Head. Enjoy and please share :) youtu.be/4RvkXUZBnsU

6.12.4: stable Version: 6.12.4 (stable) Released: 2024-12-09 Source: linux-6.12.4.tar.xz PGP Signature: linux-6.12.4.tar.sign Patch: full ( incremental ) ChangeLog: ChangeLog-6.12.4 https://www.kernel.org #linux #kernel

@oej.edvina.net and the OWASP TEA WG want to implement life cycle events for the SBOM standard. Anyone that cares about software maintenance should follow this work. It is essential for fixing the way we manage our #technical-debt and get #CRA certified. #cybersec owasp.org/blog/2024/11...

Read more about what OWASP TEA WG together with @oej.edvina.net is doing and why it is essential for your #CRA (Cyber Resilience Act) certification and managing your #tech-debt here: owasp.org/blog/2024/11... #cybersec #appsec #infosec

#Oracle #Database 23.6 Free multi-platform images now available on gvenzl/oracle-free

If you’re curious about the design and analysis of encrypted algorithms and encrypted databases, I’m putting together a collection of resources at encryptedsystems.org

New Video! There are some quirky ways of going past the limit of 1000 elements in a SQL IN-LIST. But that doesn't mean you should be doing it. youtu.be/UuZGDb_9r0I

www.saaspegasus.com/guides/uv-de...

Yesterday, Greater Manchester approved free travel passes for young people who have experienced care up until the age of 25. Through devolution, important progressive steps continue to be made.

why pipes sometimes get "stuck": buffering jvns.ca/blog/2024/11...

croc v.10.1.1 released github.com/schollz/croc...

Reasons why SELECT * is bad for SQL performance (2020) tanelpoder.com/posts/reason...

It's always great to watch videos by @kimjustice.bsky.social, the quality of the research and the content is excellent. This one clearly needed a lot of research and was very interesting. youtu.be/N8lP75g78OI?...

sqlite-vec v0.1.6 is now out, with metadata support! SQLite vector search w/ metadata filters 👀 - Perform extra filtering w/ WHERE clause in KNN queries - Internally shard vector indexes with partition keys - Aux columns for easy lookups read more: alexgarcia.xyz/blog/2024/sq...

OWASP Members Benefit: OWASP-reserved instance on the @SecureFlag secure coding training platform & the AI-powered threat modeling tool ThreatCanvas: www.secureflag.com/o... Join the #OWASP community today & start building secure software! #securecodingtraining #threatmodeling

I have a new answer for what's the easiest way to get started with Oracle or SQL, using the latest technology.. Oracle LiveSQL www.thatjeffsmith.com/archive/2024...

6.11.9: stable Version: 6.11.9 (stable) Released: 2024-11-17 Source: linux-6.11.9.tar.xz PGP Signature: linux-6.11.9.tar.sign Patch: full ( incremental ) ChangeLog: ChangeLog-6.11.9 https://www.kernel.org #linux #kernel

Excellent talk at BSides24 about considering UX into secret key design - www.youtube.com/watch?v=D2ld...

A really good starter pack by @glennpegden.bsky.social UK Cyber Starter Pack: go.bsky.app/L9Hgy79

Been an amazing week of mega changes to the OWASP ASVS Standard, with us now making a push for 5.0. My responsibility was the V6 Cryptography section, with a complete rewrite to make it more accessible and modern. github.com/OWASP/ASVS/b...