01.24.14

Finding Database Software Without Back Doors

Posted in Database, Oracle, Security at 9:19 am by Dr. Roy Schestowitz

Summary: A survey of competition in the area of databases, with emphasis on Free software and on security

ORACLE, far more so than Red Hat, has been in bed with the NSA. Oracle’s very identity (its name) is that of a CIA project — a fact that many people either don’t know or are shocked to discover. Actually, a lot of VC funds for database projects comes from the VC arm of the CIA nowadays. There are decent alternatives to Oracle’s databases, such as PostgreSQL [1], NoSQL [2], various Open Source Database management systems [3], and also GPL-licensed contenders such as RethinkDB, which has just received a lot of funding [4]. Oracle, which grabbed the most popular GPL-licensed database (MySQL), is still facing strong competition [5] and these are just examples from the past month’s news, not going further back than that. Then there’s the market share of Microsoft in database. Microsoft is famously facilitating NSA snooping, so it seems safe to say that using any database from the top proprietary providers (Oracle and Microsoft) is foolish and irresponsible when security and privacy are important. Back doors are now a fact, they are not a speculation. The trust is done.

SkySQL and MariaDB now directly challenge MySQL [6], which Oracle has neglected for the most part since it took over Sun and broke it to bits [7,8]. Oracle’s record when it comes to running big projects is not exactly good anymore [9] (and suffice to say its build/clone of RHEL cannot be trusted), so it seems safe to claims that for security and privacy one should choose the primarily Europe-based — with offices in 10 European countries — SkySQL (or even PostgreSQL), not MySQL. One little cause for concern is that a board member of SkySQL “worked as a management consultant with Indevo AB, At Kearney Inc. and Booz Allen,” according to this page. Booz Allen is the infamous NSA contractor.

It’s interesting that only few people entertain the possibility that there may be NSA back doors in the databases themselves, and given the role that the CIA played (historically and at present) in databases development we should pay close attention to that. █

Related/contextual items from the news:

PostgreSQL 9.1 Advances Open Source Database Innovation
How NoSQL will power the Internet of Things

Open-source NoSQL databases such as Apache Cassandra are (and will be) key enablers of the Internet of Things.

This is the view of Jonathan Ellis, CTO at DataStax, a company known for distributing a commercially supported version of the open source Apache Cassandra NoSQL Database Management System.
Open Source Database Management Systems Gaining Traction
RethinkDB grabs $8M to show its stuff against other NoSQL databases

RethinkDB open-sourced the database under a GNU license in November 2012, and the community is 4,000 developers strong…
Meet the Open Source Trio Primed to Topple Oracle

Over the past few years, we’ve seen an explosion of new databases. Several companies are offering relational databases that directly challenge traditional offerings from Oracle — databases that designed to store information in neat rows and columns on a single machine. And thanks to research papers detailing software built by Google and Amazon, we also have a slew of open source NoSQL databases — databases designed to store massive amounts of information across tens of hundreds of machines.
SkySQL goes after Oracle MySQL with enterprise release

SkySQL, the MariaDB MySQL fork company, isn’t just for open-source database management system (DBMS) experts anymore. With the release of its MariaDB Enterprise product, SkySQL is going straight for Oracle’s MySQL enterprise customers.
The mixed fate of Sun tech under Oracle
James Gosling grades Oracle’s handling of Sun’s technology

The Java founder assesses how well Oracle has managed the technologies it acquired in the four years since it bought Sun
Oracle’s Oregon Website Failure

For now, though, Oregon is stuck with a very expensive white elephant and most of its residents will not be able to take advantage of the benefits of the Affordable Care Act until 2015.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.

Permalink Mail Send this to a friend

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New

Patent Troll MPEG-LA Expands From Software Patents to Patents on Life While USPTO is Virtually Headless

The travesty of software patents, such as patents on multimedia compression and playback, may soon be made worse as patents on genome are being aggregated by a notorious patent aggressor
Lack of Independence of the Boards of Appeal at the European Patent Organisation (EPO) a Fatal Blow for the UPC

Issues associated with the EPC, namely the lack of separation of powers at the EPO, may mean that the UPC is merely a zombie waiting to accept its permanent death
[DE] STRASBOURG: Vertreter der Lufthansa wegen Korruption angeklagt

Laut manche internationale Quellen wurde Željko Topić gerade wegen korruptiven und kriminellen Neigungen, mit welchen er von Natur begabt ist und mit welchen er den internationalen Korporationen beim Schutz von zwielichtigen Patenten in der Republik Kroatien geholfen hat, eigentlich belohnt mit der Arbeitsstelle in EPO in München, obwohl er laut seine Kenntnisse und seine Mentalität dorthin nicht gehört. Dafür spricht auch die Angabe, daß er als Person mit Komplexen neulich seinen Wohnsitz in Zagreb geändert hat.
Links 21/7/2017: New Wine, Ubuntu EoL

Links for the day
The Bizarre World of US Patents and Ongoing Pursuit/Granting of Software Patents in Spite of Section 101

A survey of recent patents that are either far too trivial, pertain purely to software, promote surveillance, or are pursued purely for vanity (when a court is likely to deem these invalid anyway)
Battistelli's EPO Abuses May Soon Lead to the Death of the UPC and Return of the Old Order ('EPO Glory')

Having severely damaged the EPO, in a selfish effort to make Europe attractive to patent trolls and bullies, Team Battistelli gradually goes away along with the UPC
Links 20/7/2017: Qt Creator 4.4 Beta, Libgcrypt 1.8.0

Links for the day
Microsoft is Googlebombing “Linux” This Week in Order to Sell Proprietary Software That Does Not Run on GNU/Linux (and While Blackmailing OEMs Over Linux)

A reminder of the fact that Microsoft very much hates GNU/Linux, lobbies against it (e.g. in Munich), blackmails companies that distribute it (using software patents) and shares all data stored by its software through back doors (for access by the NSA and other Western spy agencies)
PTAB Persists and AIA Dominates in Spite of Smears and Bullying From Patent Extremists Including Watchtroll

The America Invents Act (AIA) and the Patent Trial and Appeal Board (PTAB) maintain and gain prominence in spite of nefarious tactics of attack sites such as Watchtroll
Patent Reform in the United States is Led by the Supreme Court, Not Industrial Lobbies

Although lobbying by large corporations has served to change the patent landscape in the US, a lot of the big changes become possible because Justices with no vested interests (in patents and patent lawsuits) overturn decisions from the Court of Appeals for the Federal Circuit
Unified Patent Court (UPC): A Conspiracy of Lies and Silence

The impasse which makes impossible any progress on the Unified Patent Court (UPC) is simply being ignored -- as if it never happened -- by Team UPC
The British Government May be Pulling Out of the UPC Fantasy, Team UPC in Panic or Denial About It

The latest news about the UPC -- news that Team UPC conveniently ignores -- is that the British government "withdrew motion on Unified Patent Court with no notice"
Links 19/7/2017: MPV 0.26, Netrunner Rolling 2017.07

Links for the day
Links 18/7/2017: Sparky 5.0, Krita 3.2 Beta, Mageia 6, Slackware Turns 24

Links for the day
New Paper Explains Why UPC Ratification Efforts Have Been Just About as Corrupt as EPO Under Battistelli

Yesterday, Dr. Ingve Björn Stjerna revealed serious Constitutional issues with the campaign for the Unified Patent Court, which resembles an aggressive Battistelli-esque coup, not a democratic process by any stretch of imagination
Anti-Patent Trolls Reform in the US Evolves Nicely and Rogue Judges Get Named, Shamed

A quick look at today's coverage regarding the battle against patent trolls in the US, as well as the patent microcosm's war on the Patent Trial and Appeal Board (PTAB)
Software Patents Lobbying at IAM Strives to Reinforce the Positions of Patent Maximalists

The latest push for software patents in the software powerhouse which is India and rants about the EPO's admission about overpatenting, only after pressure from the European Commission
UPC Puff Piece in the Scottish Media is Just an Advertisement by Marks & Clerk

Advertising in the form of an 'article' (complete with self-serving bias and falsehoods) in The Scotsman today, courtesy of Team UPC
From East to West and Even Down South at the Eastern District of Texas Patent Trolls Are Losing Everything

Patent trolls that are accustomed to friendly judges, typically in the Eastern District of Texas, will be circling down the drain if the trend of "fee award" (to the vindicated defendant) continues
Those Who Endlessly Attacked Michelle Lee Now Attack Supporters of PTAB, Not Just PTAB

Watchtroll, which combats patent progress by character assassination of instrumental figures, continues in its warpath today
In the Face of Malicious Lobbying, High Tech Inventors Alliance (HTIA) and Computer and Communications Industry Association (CCIA) Protect PTAB

A new push by the patent microcosm to eliminate PTAB and marginalise Section 101 (which helps suppress software patents) is quickly met with opposition from concerned politicians and groups that represent actual technology companies
Weakening of Patents Assigned to Google and Another New Patent Lawsuit Against Uber

Project Loon patent canceled, Google's lawsuit against Uber gets 'diluted' by 75%, and Uber faces a new lawsuit in the Eastern District of Texas (capital of patent trolls)
After the 'Fall' of Texas, Patent Trolls Struggle and Some Are on the Retreat

Things are getting out of hand for patent trolls, which find themselves on the defensive (from challenges to all their patents) and try to escape the cases they started in order to dodge paying fees (to no avail)
Immersion, FitBit, Jawbone, and Creative Chose to be a Pile of Patents Rather Than Real Companies

FitBit is the latest company to be slapped by Immersion (having already driven Jawbone out of business) and there's news about Creative, which uses old patents to shake down Apple and Android OEMs
Debate About Software Patentability in India Still Dominated by Patent Lawyers Rather Than Software Developers

The warped debate in English-speaking media gives the impression that India should open the door to software patents even though it's perfectly clear that such patents would harm India's interests
Links 16/7/2017: Mesa 17.1.5, FreeBSD 11.1 RC3

Links for the day
Serious Factual Errors in UPC Coverage at Science|Business and Lack of Coverage in the General Media

With much of the British media already paid by the EPO to produce UPC puff pieces, we continue to see poor coverage on the topic (if any at all)
Guest Post: Is Germany's UPC Ratification Postponement Related to Problems at the EPO?

A question currently being asked by some people watching UPC developments in Germany: "Is Germany's UPC ratification postponement related to problems at the EPO?"
Amazon is Stockpiling Terrible Patents and Using These for Competitive Advantage

Demonstrating the real purpose of patent hoards, Amazon too 'pulls a Microsoft' and shields its dominance by an atmosphere of sheer fear
Microsoft-Owned LinkedIn is Ramping Up Software Patents Pursuits, Maybe Lawsuits

A quick look at some of the patterns and priorities when it comes to Microsoft's patent strategy, which typically involves coercion, extortion and sometimes (when coercion or extortion fail) litigation