Re: wrapping packages
> > That was the case, back at highschool days... > > I think you're still there... at least according to your posts. :) I call it active learning :) Tanel. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Tanel Poder wrote: After all, I do have the right to know, which code is executed on my computer (OTOH, I've not read any agreements too thoroughly, when downloading software). "I do have the right to know which code is executed on my computer" or not "execute that code" but not hack it to know what's running there. Read agreements :) [and I would not suggest you to discuss illegal things -- 'how to hack' -- it creates wrong impression about you as about an IT person, IMHO. "Intelligent IT individual" <> "c00l hazker". Believe me, I know what I'm talking about, it's much more "cool" when you knock the door (in this case [EMAIL PROTECTED]) than someone else knocks your door -- "feel the difference" (c)] -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Vladimir Begun INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Anyway's Peter is right in some sense as I heard that some Russian guy Those Russians... :) They can do a lot. -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Vladimir Begun INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Tanel Poder wrote: :) I just think you have/had too much time and nothing serious and important to do. That was the case, back at highschool days... I think you're still there... at least according to your posts. :) -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Vladimir Begun INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: wrapping packages
Jared, That is also my understanding of what wrap does - after all if the wrapped PL/SQL code is encrypted why do string literals appear within the wrapped output. And where do you specify the encryption key - you don't because wrap does not encrypt. I'm not surprised that people think the wrap command encrypts the code seeing as authors likes Couchman and Marisetti use this language within "OCP Oracle9i Database Fundamentals I Exam Guide" page 96 and it is also stated in the PL/SQL User's Guide and Reference. Cheers, Craig. -Original Message- Sent: Monday, 22 September 2003 2:15 AM To: Multiple recipients of list ORACLE-L IIRC, 'wrap' does not actually encrypt the code. Rather, it simply does a precompile on it and then stores the pcode in the database. Jared On Sat, 2003-09-20 at 14:29, Peter Gram wrote: > Hi Pete > > I must point out that there must be a unwrap, since the Oracle database > can run the wrapped pl/sql code :-) > > It is based on trust in Oracle cooperation / development. > > Some times it would make since to write the code in c/c++ since it > harder to revers. > > Pete Finnigan wrote: > > >Hi > > > >Very true, but if there was the wrap process wouldn't be much use as > >anyone could un wrap your code. But you are right the main reason to be > >cautious is to not delete your source code locally. > > > >kind regards > > > >Pete > > > >In article <[EMAIL PROTECTED]>, bhabani s pradhan > ><[EMAIL PROTECTED]> writes > > > > > >>one caution: > >> > >>there is no unwrap cmd/exe > >> > >>Regards > >> > >> > > > > > > > > -- > Peter Gram, Miracle A/S > Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696 > mail : [EMAIL PROTECTED] - http://MiracleAS.dk > > Upcoming events: > DatabaseForum 2003, Lalandia 2-4 October > Visit http://miracleas.dk/events/DBF2003/invitation.html > > Miracle Master Class with Tom Kyte, 12-14 January 2004 > > > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Peter Gram > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jared Still INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Craig Munday INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi! I think disassembling the code itself wouldn't be that condemnable (is this correct usage of the word?), but if anyone would start disributing the wrapping algorithm or spreading modified Oracle code, that would make Oracle wake up. After all, I do have the right to know, which code is executed on my computer (OTOH, I've not read any agreements too thoroughly, when downloading software). Anyway, I don't have that much money to spend on lawyers than Oracle does, so I won't start spreading the results. And I probably won't have any results anyway, since I don't have that much spare time anymore, like Vladimir pointed out... Tanel. - Original Message - To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Sunday, September 21, 2003 8:39 PM > Hi Peter, Tanel and Jared, > > Peter: I meant a public unwrap process not the internal mechanisms in > the PL/SQL interpreter / VM. > > Tanel: I would be more worried about Oracle coming after you in the > legally sense if you did reverse engineer the wrap process!! > > Jared: Are you sure that's how it works? do you have inside knowledge? - > if it is this way, is it compiled P-Code or the intermediate DIANA > representation? - if it were DIANA or p-code then Peter is wrong above > as i would assume that instead of needing an un-wrapper that the VM / > interpreter just loads p-code rather than calling the compiler first - > if it is DIANA representation then that would mean loading somewhere in > the middle of the normal process - or would it? - Is normal (non > wrapped) pl/sql that is loaded into the cache held as p-code or DIANA - > (or both?). > > I understood that the wrap process encoded or rather obfuscated the > PL/SQL not encrypted it - I am not sure storing it as P-Code or diana > would be secure as it should then be possible to extract enough > structural program info from the database with the diana packages? or > from the tables where the diana - or p-code is held. > > Anyway's Peter is right in some sense as I heard that some Russian guy > is supposed to have reverse engineered the wrap process and un-encoded / > decrypted all of the builtin packages and posted the code somewhere on > the net - A guy from a security company in the states told me this some > months ago but i haven't seen any discussion of it to confirm it. > > kind regards > > Pete > > -- > Pete Finnigan > email:[EMAIL PROTECTED] > Web site: http://www.petefinnigan.com - Oracle security audit specialists > Book:Oracle security step-by-step Guide - see http://store.sans.org for details. > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Pete Finnigan > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
> :) I just think you have/had too much time and nothing serious and important > to do. That was the case, back at highschool days... Tanel. > -- > Vladimir Begun > The statements and opinions expressed here are my own and > do not necessarily represent those of Oracle Corporation. > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Vladimir Begun > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Tanel Poder wrote: Perhaps you're not aware of the way executables compiled on your Solaris and Windows platforms. In detail, not. In general, yes. Ok, I checked, you're correct, wrap isn't only this 40kB executable, uses orancrypt9.dll (100kB) in Windows, this might be the one where encryption is done... The word 'ecryption' is so amazing and enigmatic, probably that's why so many people are 'poisoned'. It shouldn't be that hard to reverse engineer it. It's an extremely commendable plan... (a touch of irony here) :) I've dealt with disassembling before, back in old dos times (disassembling 4kB graphical intros and few viruses :). I don't think this is a hard job to JFYI, people who made 4kb demos do share their code and ideas, in case one's really interested to get into this. do, it's just time consuming - it gets hard when the authors have planted debugger traps and various other tricks into the code that make the crackers life hard (or should I say interesting :) :) I just think you have/had too much time and nothing serious and important to do. -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Vladimir Begun INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi Peter, Tanel and Jared, Peter: I meant a public unwrap process not the internal mechanisms in the PL/SQL interpreter / VM. Tanel: I would be more worried about Oracle coming after you in the legally sense if you did reverse engineer the wrap process!! Jared: Are you sure that's how it works? do you have inside knowledge? - if it is this way, is it compiled P-Code or the intermediate DIANA representation? - if it were DIANA or p-code then Peter is wrong above as i would assume that instead of needing an un-wrapper that the VM / interpreter just loads p-code rather than calling the compiler first - if it is DIANA representation then that would mean loading somewhere in the middle of the normal process - or would it? - Is normal (non wrapped) pl/sql that is loaded into the cache held as p-code or DIANA - (or both?). I understood that the wrap process encoded or rather obfuscated the PL/SQL not encrypted it - I am not sure storing it as P-Code or diana would be secure as it should then be possible to extract enough structural program info from the database with the diana packages? or from the tables where the diana - or p-code is held. Anyway's Peter is right in some sense as I heard that some Russian guy is supposed to have reverse engineered the wrap process and un-encoded / decrypted all of the builtin packages and posted the code somewhere on the net - A guy from a security company in the states told me this some months ago but i haven't seen any discussion of it to confirm it. kind regards Pete -- Pete Finnigan email:[EMAIL PROTECTED] Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Pete Finnigan INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
IIRC, 'wrap' does not actually encrypt the code. Rather, it simply does a precompile on it and then stores the pcode in the database. Jared On Sat, 2003-09-20 at 14:29, Peter Gram wrote: > Hi Pete > > I must point out that there must be a unwrap, since the Oracle database > can run the wrapped pl/sql code :-) > > It is based on trust in Oracle cooperation / development. > > Some times it would make since to write the code in c/c++ since it > harder to revers. > > Pete Finnigan wrote: > > >Hi > > > >Very true, but if there was the wrap process wouldn't be much use as > >anyone could un wrap your code. But you are right the main reason to be > >cautious is to not delete your source code locally. > > > >kind regards > > > >Pete > > > >In article <[EMAIL PROTECTED]>, bhabani s pradhan > ><[EMAIL PROTECTED]> writes > > > > > >>one caution: > >> > >>there is no unwrap cmd/exe > >> > >>Regards > >> > >> > > > > > > > > -- > Peter Gram, Miracle A/S > Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696 > mail : [EMAIL PROTECTED] - http://MiracleAS.dk > > Upcoming events: > DatabaseForum 2003, Lalandia 2-4 October > Visit http://miracleas.dk/events/DBF2003/invitation.html > > Miracle Master Class with Tom Kyte, 12-14 January 2004 > > > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Peter Gram > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jared Still INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi Did a "nm -D wrap" this gave heaps of symbols, so wrap is loading shared libs. This means revers engineering a lot of Oracle code :-( Govindan K wrote: Coming to think of it, is the 3Mb size is for stripped or unstripped executable?. I know 3Mb if stripped is not likely to come to 40K. Nevertheless the memory addressing for UNIX is diff. from Windoz. May be someone else in the list has a better knowledge of it. GovindanK <-Original Message-> *From: Tanel Poder* Sent: 9/20/2003 2:44:48 PM To: [EMAIL PROTECTED] Subject: Re: wrapping packages I checked, the wrap executable in 8.0.6 dist for solaris is about 3MB, but for 9.2 in Windows it's only about 40k. It shouldn't be that hard to reverse engineer it. Probably the ones who already have cracked the algorithm aren't spreading the knowledge - why should they anyway?! Tanel. - Original Message - To: "Multiple recipients of list ORACLE-L" Sent: Sunday, September 21, 2003 12:29 AM > Hi Pete > > I must point out that there must be a unwrap, since the Oracle database > can run the wrapped pl/sql code :-) > > It is based on trust in Oracle coopera! tion / development. > > Some times it would make since to write the code in c/c++ since it > harder to revers. > > Pete Finnigan wrote: > > >Hi > > > >Very true, but if there was the wrap process wouldn't be much use as > >anyone could un wrap your code. But you are right the main reason to be > >cautious is to not delete your source code locally. > > > >kind regards > > > >Pete > > > >In article , bhabani s pradhan > > writes > > > > > >>one caution: > >> > >>there is no unwrap cmd/exe > >> > >>Regards > >> ___ Get Your 10MB account for FREE at http://mail.arabia.com ! Access MILLIONS of JOBS *NOW*! <http://ads.arabia.com/?SHT=text_email_english> -- Peter Gram, Miracle A/S Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696 mail : [EMAIL PROTECTED] - http://MiracleAS.dk Upcoming events: DatabaseForum 2003, Lalandia 2-4 October Visit http://miracleas.dk/events/DBF2003/invitation.html Miracle Master Class with Tom Kyte, 12-14 January 2004 -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Peter Gram INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Coming to think of it, is the 3Mb size is for stripped or unstripped executable?. I know 3Mb if stripped is not likely to come to 40K. Nevertheless the memory addressing for UNIX is diff. from Windoz. May be someone else in the list has a better knowledge of it. GovindanK <-Original Message-> From: Tanel PoderSent: 9/20/2003 2:44:48 PMTo: [EMAIL PROTECTED]Subject: Re: wrapping packages I checked, the wrap executable in 8.0.6 dist for solaris is about 3MB, but for 9.2 in Windows it's only about 40k. It shouldn't be that hard to reverse engineer it. Probably the ones who already have cracked the algorithm aren't spreading the knowledge - why should they anyway?! Tanel. - Original Message - To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>Sent: Sunday, September 21, 2003 12:29 AM > Hi Pete > > I must point out that there must be a unwrap, since the Oracle database > can run the wrapped pl/sql code :-) > > It is based on trust in Oracle coopera! tion / development. > > Some times it would make since to write the code in c/c++ since it > harder to revers. > > Pete Finnigan wrote: > > >Hi > > > >Very true, but if there was the wrap process wouldn't be much use as > >anyone could un wrap your code. But you are right the main reason to be > >cautious is to not delete your source code locally. > > > >kind regards > > > >Pete > > > >In article <[EMAIL PROTECTED]>, bhabani s pradhan > ><[EMAIL PROTECTED]> writes > > > > > >>one caution: > >> > >>there is no unwrap cmd/exe > >> > >>Regards > >> ___Get Your 10MB account for FREE at http://mail.arabia.com !Access MILLIONS of JOBS NOW!
Re: wrapping packages
> Tanel Poder wrote: > > I checked, the wrap executable in 8.0.6 dist for solaris is about 3MB, but > > for 9.2 in Windows it's only about 40k. > > Perhaps you're not aware of the way executables compiled on your Solaris and > Windows platforms. In detail, not. In general, yes. Ok, I checked, you're correct, wrap isn't only this 40kB executable, uses orancrypt9.dll (100kB) in Windows, this might be the one where encryption is done... > > > It shouldn't be that hard to reverse engineer it. > > It's an extremely commendable plan... (a touch of irony here) :) I've dealt with disassembling before, back in old dos times (disassembling 4kB graphical intros and few viruses :). I don't think this is a hard job to do, it's just time consuming - it gets hard when the authors have planted debugger traps and various other tricks into the code that make the crackers life hard (or should I say interesting :) Tanel. > > > Probably the ones who already have cracked the algorithm aren't spreading > > the knowledge - why should they anyway?! > > I suggest you to call Oracle legal and discuss this issue and your > original plan of fixing it. :) > -- > Vladimir Begun > The statements and opinions expressed here are my own and > do not necessarily represent those of Oracle Corporation. > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Vladimir Begun > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Tanel Poder wrote: I checked, the wrap executable in 8.0.6 dist for solaris is about 3MB, but for 9.2 in Windows it's only about 40k. Perhaps you're not aware of the way executables compiled on your Solaris and Windows platforms. It shouldn't be that hard to reverse engineer it. It's an extremely commendable plan... (a touch of irony here) Probably the ones who already have cracked the algorithm aren't spreading the knowledge - why should they anyway?! I suggest you to call Oracle legal and discuss this issue and your original plan of fixing it. :) -- Vladimir Begun The statements and opinions expressed here are my own and do not necessarily represent those of Oracle Corporation. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Vladimir Begun INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
I checked, the wrap executable in 8.0.6 dist for solaris is about 3MB, but for 9.2 in Windows it's only about 40k. It shouldn't be that hard to reverse engineer it. Probably the ones who already have cracked the algorithm aren't spreading the knowledge - why should they anyway?! Tanel. - Original Message - To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]> Sent: Sunday, September 21, 2003 12:29 AM > Hi Pete > > I must point out that there must be a unwrap, since the Oracle database > can run the wrapped pl/sql code :-) > > It is based on trust in Oracle cooperation / development. > > Some times it would make since to write the code in c/c++ since it > harder to revers. > > Pete Finnigan wrote: > > >Hi > > > >Very true, but if there was the wrap process wouldn't be much use as > >anyone could un wrap your code. But you are right the main reason to be > >cautious is to not delete your source code locally. > > > >kind regards > > > >Pete > > > >In article <[EMAIL PROTECTED]>, bhabani s pradhan > ><[EMAIL PROTECTED]> writes > > > > > >>one caution: > >> > >>there is no unwrap cmd/exe > >> > >>Regards > >> > >> > > > > > > > > -- > Peter Gram, Miracle A/S > Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696 > mail : [EMAIL PROTECTED] - http://MiracleAS.dk > > Upcoming events: > DatabaseForum 2003, Lalandia 2-4 October > Visit http://miracleas.dk/events/DBF2003/invitation.html > > Miracle Master Class with Tom Kyte, 12-14 January 2004 > > > > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Peter Gram > INET: [EMAIL PROTECTED] > > Fat City Network Services-- 858-538-5051 http://www.fatcity.com > San Diego, California-- Mailing list and web hosting services > - > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi Pete I must point out that there must be a unwrap, since the Oracle database can run the wrapped pl/sql code :-) It is based on trust in Oracle cooperation / development. Some times it would make since to write the code in c/c++ since it harder to revers. Pete Finnigan wrote: Hi Very true, but if there was the wrap process wouldn't be much use as anyone could un wrap your code. But you are right the main reason to be cautious is to not delete your source code locally. kind regards Pete In article <[EMAIL PROTECTED]>, bhabani s pradhan <[EMAIL PROTECTED]> writes one caution: there is no unwrap cmd/exe Regards -- Peter Gram, Miracle A/S Phone : +45 2527 7107, Fax : +45 4466 8856, Home +45 3874 5696 mail : [EMAIL PROTECTED] - http://MiracleAS.dk Upcoming events: DatabaseForum 2003, Lalandia 2-4 October Visit http://miracleas.dk/events/DBF2003/invitation.html Miracle Master Class with Tom Kyte, 12-14 January 2004 -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Peter Gram INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi Very true, but if there was the wrap process wouldn't be much use as anyone could un wrap your code. But you are right the main reason to be cautious is to not delete your source code locally. kind regards Pete In article <[EMAIL PROTECTED]>, bhabani s pradhan <[EMAIL PROTECTED]> writes >one caution: > >there is no unwrap cmd/exe > >Regards -- Pete Finnigan email:[EMAIL PROTECTED] Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Pete Finnigan INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Re: wrapping packages
one caution: there is no unwrap cmd/exe Regards On Sat, 20 Sep 2003 Pete Finnigan wrote : >Hi > >Research the wrap command, the binary is located in >$ORACLE_HOME/bin and >running it for example would be like this for instance: > >$ wrap iname=./test.sql oname=./test.plb > >kind regards > >Pete > >In article <[EMAIL PROTECTED]>, >[EMAIL PROTECTED] >components.com writes > >how can I wrap package bodies in oracle8i > >-- >Pete Finnigan >email:[EMAIL PROTECTED] >Web site: http://www.petefinnigan.com - Oracle security audit >specialists >Book:Oracle security step-by-step Guide - see >http://store.sans.org for details. > >-- >Please see the official ORACLE-L FAQ: http://www.orafaq.net >-- >Author: Pete Finnigan > INET: [EMAIL PROTECTED] > >Fat City Network Services-- 858-538-5051 >http://www.fatcity.com >San Diego, California-- Mailing list and web hosting >services >- >To REMOVE yourself from this mailing list, send an E-Mail >message >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and >in >the message BODY, include a line containing: UNSUB ORACLE-L >(or the name of mailing list you want to be removed from). You >may >also send the HELP command for other information (like >subscribing). ___ Art meets Anesthesia; Shefali Weds Dr. Raman. Rediff Matchmaker strikes another interesting match !! Visit http://matchmaker.rediff.com?1 -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: bhabani s pradhan INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Hi Research the wrap command, the binary is located in $ORACLE_HOME/bin and running it for example would be like this for instance: $ wrap iname=./test.sql oname=./test.plb kind regards Pete In article <[EMAIL PROTECTED]>, [EMAIL PROTECTED] components.com writes >how can I wrap package bodies in oracle8i -- Pete Finnigan email:[EMAIL PROTECTED] Web site: http://www.petefinnigan.com - Oracle security audit specialists Book:Oracle security step-by-step Guide - see http://store.sans.org for details. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Pete Finnigan INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: wrapping packages
Title: IBM AIX 32-Bit Look at wrap command (under oracle_home) Tanel. - Original Message - From: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L Sent: Friday, September 19, 2003 3:37 PM Subject: wrapping packages how can I wrap package bodies in oracle8i
