Re: [sqlite] Vetting SQLite

2018-02-06 Thread Olivier Mascia
> Le 6 févr. 2018 à 00:30, Simon Slavin a écrit : > >> You know that every copy of Windows comes with SQLite preinstalled, >> right? C:\Windows\System32\winsqlite3.dll > > And SQLite is used internally in several parts of Microsoft Office. For > example, Outlook's

Re: [sqlite] Vetting SQLite

2018-02-05 Thread J Decker
On Mon, Feb 5, 2018 at 5:04 PM, Richard Hipp wrote: > On 2/5/18, Stephen Chrzanowski wrote: > > I was surprised to see that statement, so, checking my system, this isn't > > true. Win7Pro-x64. > > It's on Windows10. > M:\>dir c:\windows\SysWOW64\*sqlite*

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Simon Slavin
On 6 Feb 2018, at 12:56am, J. King wrote: > I believe it's only since Windows 8. Seems likely. SQLite has been part of the Windows SDK since Windows 10 Anniversary Update [1], some time around August 2016. I find it plausible that SQLite was in Windows 8 but not in

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Richard Hipp
On 2/5/18, Stephen Chrzanowski wrote: > I was surprised to see that statement, so, checking my system, this isn't > true. Win7Pro-x64. It's on Windows10. -- D. Richard Hipp d...@sqlite.org ___ sqlite-users mailing list

Re: [sqlite] Vetting SQLite

2018-02-05 Thread J. King
I believe it's only since Windows 8. On February 5, 2018 7:51:39 PM EST, Stephen Chrzanowski wrote: >I was surprised to see that statement, so, checking my system, this >isn't >true. Win7Pro-x64. Not with that filename anyways. Searching my >system >with the

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Stephen Chrzanowski
I was surprised to see that statement, so, checking my system, this isn't true. Win7Pro-x64. Not with that filename anyways. Searching my system with the "Everything" tool, [ *sqlite3.exe ] comes up with DLLs that I've touched only. The DLL's I've dumped into the Windows directories exist in

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Simon Slavin
On 5 Feb 2018, at 11:02pm, Richard Hipp wrote: > On 2/5/18, Drago, William @ CSG - NARDA-MITEQ wrote: >> >> Most of the software we use here, Microsoft and other well-known and >> paid-for products, > > You know that every copy of Windows comes with

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Richard Hipp
On 2/5/18, Drago, William @ CSG - NARDA-MITEQ wrote: > > Most of the software we use here, Microsoft and other well-known and > paid-for products, You know that every copy of Windows comes with SQLite preinstalled, right? C:\Windows\System32\winsqlite3.dll -- D. Richard

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Drago, William @ CSG - NARDA-MITEQ
To all that replied, thank you. Open source, not open contribution is a plus, so is the wide deployment and well known users (Airbus). There were many other good ideas mentioned like examining the source for network calls, etc. All of this will help me build a case in favor of SQLite. No one

Re: [sqlite] Vetting SQLite

2018-02-05 Thread John Long
On Mon, 2018-02-05 at 09:39 -0800, Jens Alfke wrote: > > On Feb 5, 2018, at 9:21 AM, Drago, William @ CSG - NARDA-MITEQ > liam.dr...@l3t.com> wrote: > > > > The reliable part is easy because there is enough information on > > the SQLite website about testing, but what about security? > > Open

Re: [sqlite] Vetting SQLite

2018-02-05 Thread John Found
On Mon, 5 Feb 2018 17:21:53 + "Drago, William @ CSG - NARDA-MITEQ" wrote: > All, > > I've been using/loving SQLite for years, but the use of open source software > is highly discouraged where I work, and now I have to prove to our IT dept. > that SQLite is reliable

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Bob Friesenhahn
On Mon, 5 Feb 2018, Jens Alfke wrote: You can very easily prove that SQLite contains no networking code, so it’s incapable of accessing any network. Just search through sqlite3.c looking for the names of the system calls needed to open a socket; they don’t appear. Or more rigorously, use a

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Richard Hipp
On 2/5/18, Drago, William @ CSG - NARDA-MITEQ wrote: > All, > > I've been using/loving SQLite for years, but the use of open source software > is highly discouraged where I work, and now I have to prove to our IT dept. > that SQLite is reliable and secure. The reliable part

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Igor Korot
Hi, On Mon, Feb 5, 2018 at 11:41 AM, Simon Slavin wrote: > On 5 Feb 2018, at 5:21pm, Drago, William @ CSG - NARDA-MITEQ > wrote: > >> I've been using/loving SQLite for years, but the use of open source software >> is highly discouraged where I

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Jens Alfke
> On Feb 5, 2018, at 9:21 AM, Drago, William @ CSG - NARDA-MITEQ > wrote: > > The reliable part is easy because there is enough information on the SQLite > website about testing, but what about security? Open source software is more secure than closed source, since

Re: [sqlite] Vetting SQLite

2018-02-05 Thread Simon Slavin
On 5 Feb 2018, at 5:21pm, Drago, William @ CSG - NARDA-MITEQ wrote: > I've been using/loving SQLite for years, but the use of open source software > is highly discouraged where I work, and now I have to prove to our IT dept. > that SQLite is reliable and secure. The

Re: [sqlite] Vetting SQLite

2018-02-05 Thread J. King
I'm not aware of a statement or guarantee, but the Web site provides lots of evidence here: In particular, SQLite being used as part of aircraft software by Airbus should tell you something. On February 5, 2018 12:21:53 PM EST, "Drago, William @ CSG -

[sqlite] Vetting SQLite

2018-02-05 Thread Drago, William @ CSG - NARDA-MITEQ
All, I've been using/loving SQLite for years, but the use of open source software is highly discouraged where I work, and now I have to prove to our IT dept. that SQLite is reliable and secure. The reliable part is easy because there is enough information on the SQLite website about testing,