Re: Security

2001-04-09 Thread Thalis A. Kalfigopoulos
I haven't read Mysql's authorization mechanism from Paul's book, but from the Oreilly book and it was pretty comprehensive and intuitive. I suggest you borrow that book from your local library or buy it. To try to write here about how it works would be a waste of time for both of us. It is rath

Re: Security Mysql

2001-04-04 Thread Danny
Look very carefully at the mysql database by typing in mysql -u root -p mysql Look at the manunal for how you can INSERT INTO the user table or how you can use GRANT On Thu, 05 Apr 2001, J.Heegsma wrote: > >%_Dear Sir/Madam, > > I am a student and my teacher want's to try to break in into

Re: Security annoucement mailing-list ?

2001-03-01 Thread Sergei Golubchik
Hi! On Mar 01, Benjamin Pflugmann wrote: > Hi. > > On Mon, Feb 26, 2001 at 08:57:19PM +0100, you wrote > [...] > > Yes, security info is to be sent to announcement list. > > Well, the last two weren't sent to the announcement list, AFAIK. Well, > it's a question of its own, whether to send an a

Re: Security annoucement mailing-list ?

2001-02-28 Thread Benjamin Pflugmann
Hi. On Mon, Feb 26, 2001 at 08:57:19PM +0100, you wrote [...] > Yes, security info is to be sent to announcement list. Well, the last two weren't sent to the announcement list, AFAIK. Well, it's a question of its own, whether to send an announcement out due to an buffer overflow in the client.

Re: Security Question

2001-02-27 Thread Donald Korth
LOAD DATA [LOW_PRIORITY] [LOCAL] INFILE 'file_name.txt' [REPLACE | IGNORE] INTO TABLE tbl_name [FIELDS [TERMINATED BY '\t'] [OPTIONALLY] ENCLOSED BY ''] [ESCAPED BY '\\' ]] [LINES TERMINATED BY '\n'] [IGNORE number LINES] [(col_name,...)] The LOAD DATA

Re: Security annoucement mailing-list ?

2001-02-26 Thread Sergei Golubchik
Hi! On Feb 26, Nicolas GREGOIRE wrote: > > > > I'd rather see them sent to the MySQL announcements list. It is > > already VERY low-traffic, and that seems like appropriate content. > > > > No sense creating another list just for the VERY occasional > > announcements when we already have one [

Re: Security annoucement mailing-list ?

2001-02-26 Thread Nicolas GREGOIRE
> I'd rather see them sent to the MySQL announcements list. It is > already VERY low-traffic, and that seems like appropriate content. > > No sense creating another list just for the VERY occasional > announcements when we already have one [mostly] for that purpose. It seems to be a good idea.

Re: Security annoucement mailing-list ?

2001-02-26 Thread Jeremy D. Zawodny
On Mon, Feb 26, 2001 at 04:34:20PM +0100, Nicolas GREGOIRE wrote: > > is it possible to create (I don't think it already exists) a > mailing-list just for security problems about MySQL. > > I'm very concerned about the security of my web sites, and I rely on > MySQL to provide dynamic content. >

RE: Security annoucement mailing-list ?

2001-02-26 Thread Simon Green
Hi all I find the MySQL mail service very useful but he has a point hat due to the number of e-mails form this list it mite be an idler to split things up a bit? Simon Green ISE -Original Message- From: Nicolas GREGOIRE [mailto:[EMAIL PROTECTED]] Sent: 26 February 2001 15:34 To: [EMAIL PR

Re: SECURITY issue in remote tcp/ip connecting?

2001-01-20 Thread Tõnu Samuel
Derek Sivers wrote: > > > > Any measures I could take (like SSH) to encrypt the transaction? > >Use CIPE tunnel. You can find it: > >http://sites.inka.de/sites/bigred/devel/cipe.html > > Is this anything like ipsec? > http://www.openbsd.org/faq/faq13.html > (I'm using OpenBSD.) > > Or, rather,

Re: SECURITY issue in remote tcp/ip connecting?

2001-01-19 Thread Derek Sivers
> > Any measures I could take (like SSH) to encrypt the transaction? >Use CIPE tunnel. You can find it: >http://sites.inka.de/sites/bigred/devel/cipe.html Is this anything like ipsec? http://www.openbsd.org/faq/faq13.html (I'm using OpenBSD.) Or, rather, could I use ipsec for this same thing a

Re: SECURITY issue in remote tcp/ip connecting?

2001-01-19 Thread Tõnu Samuel
Derek Sivers wrote: > searched the lists & books & found no mention of this: > > Are there any security issues in doing lots of remote-connecting (TCP/IP) > to my MySQL database server? Anything can be broken with this. MySQL limits this by amount of max_connections but if someone else occupi

Re: Security issue

2001-01-18 Thread Sergei Golubchik
Hi! On Jan 18, Nicolas GREGOIRE wrote: > Hi, > > Still not any info about the buffer-overflow discovered last week ? > Shouldn't be fixed at the beginning of the week ? > > Please, dear MySQL team, give us info !! > > Regards, > Nicob Fixed in latest release (3.23.31). Regards, Sergei -- My

<    1   2