01.24.14

Finding Database Software Without Back Doors

Posted in Database, Oracle, Security at 9:19 am by Dr. Roy Schestowitz

Summary: A survey of competition in the area of databases, with emphasis on Free software and on security

ORACLE, far more so than Red Hat, has been in bed with the NSA. Oracle’s very identity (its name) is that of a CIA project — a fact that many people either don’t know or are shocked to discover. Actually, a lot of VC funds for database projects comes from the VC arm of the CIA nowadays. There are decent alternatives to Oracle’s databases, such as PostgreSQL [1], NoSQL [2], various Open Source Database management systems [3], and also GPL-licensed contenders such as RethinkDB, which has just received a lot of funding [4]. Oracle, which grabbed the most popular GPL-licensed database (MySQL), is still facing strong competition [5] and these are just examples from the past month’s news, not going further back than that. Then there’s the market share of Microsoft in database. Microsoft is famously facilitating NSA snooping, so it seems safe to say that using any database from the top proprietary providers (Oracle and Microsoft) is foolish and irresponsible when security and privacy are important. Back doors are now a fact, they are not a speculation. The trust is done.

SkySQL and MariaDB now directly challenge MySQL [6], which Oracle has neglected for the most part since it took over Sun and broke it to bits [7,8]. Oracle’s record when it comes to running big projects is not exactly good anymore [9] (and suffice to say its build/clone of RHEL cannot be trusted), so it seems safe to claims that for security and privacy one should choose the primarily Europe-based — with offices in 10 European countries — SkySQL (or even PostgreSQL), not MySQL. One little cause for concern is that a board member of SkySQL “worked as a management consultant with Indevo AB, At Kearney Inc. and Booz Allen,” according to this page. Booz Allen is the infamous NSA contractor.

It’s interesting that only few people entertain the possibility that there may be NSA back doors in the databases themselves, and given the role that the CIA played (historically and at present) in databases development we should pay close attention to that. █

Related/contextual items from the news:

PostgreSQL 9.1 Advances Open Source Database Innovation
How NoSQL will power the Internet of Things

Open-source NoSQL databases such as Apache Cassandra are (and will be) key enablers of the Internet of Things.

This is the view of Jonathan Ellis, CTO at DataStax, a company known for distributing a commercially supported version of the open source Apache Cassandra NoSQL Database Management System.
Open Source Database Management Systems Gaining Traction
RethinkDB grabs $8M to show its stuff against other NoSQL databases

RethinkDB open-sourced the database under a GNU license in November 2012, and the community is 4,000 developers strong…
Meet the Open Source Trio Primed to Topple Oracle

Over the past few years, we’ve seen an explosion of new databases. Several companies are offering relational databases that directly challenge traditional offerings from Oracle — databases that designed to store information in neat rows and columns on a single machine. And thanks to research papers detailing software built by Google and Amazon, we also have a slew of open source NoSQL databases — databases designed to store massive amounts of information across tens of hundreds of machines.
SkySQL goes after Oracle MySQL with enterprise release

SkySQL, the MariaDB MySQL fork company, isn’t just for open-source database management system (DBMS) experts anymore. With the release of its MariaDB Enterprise product, SkySQL is going straight for Oracle’s MySQL enterprise customers.
The mixed fate of Sun tech under Oracle
James Gosling grades Oracle’s handling of Sun’s technology

The Java founder assesses how well Oracle has managed the technologies it acquired in the four years since it bought Sun
Oracle’s Oregon Website Failure

For now, though, Oregon is stuck with a very expensive white elephant and most of its residents will not be able to take advantage of the benefits of the Affordable Care Act until 2015.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.

Permalink Mail Send this to a friend

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New

The Court of Appeals for the Federal Circuit (CAFC) Gradually Champions Patent Quality, in a Spectacular Reversal on Its Past Ways

Some of the latest actions and decisions from the Federal Circuit, which originally brought software patents to the United States and is now taking them away, gradually
The Mohawk-PTAB Fiasco Threatens the Tribe's Reputation More Than It Threatens PTAB

In an effort to dodge scrutiny from the Patent Trial and Appeal Board (PTAB), Allergan Plc offloaded a lot of negative publicity onto the Mohawk people, owing primarily to the Mowhawk Tribe's general counsel, Dale White
Latest EPO Rumours Allege That Benoît Battistelli Rigged the Process of EPO President's Selection

António Campinos is quite likely the next EPO President, as insiders suspect that many applications for the job got rejected politically
Links 23/9/2017: Mesa 17.1.10 RC, Samba 4.7.0, KStars 2.8.4

Links for the day
Courts Are Losing Patience for Gilstrap's Unbridled Support of Patent Trolls

The man whose court has become a trolling ‘factory’ is being refuted (but not reprimanded) by the CAFC, which certainly can see that something is amiss and serves to discredit the system as a whole
Intellectual Ventures, GNU/Linux/Android/FOSS Patents, and the Ascent of European Patent Trolls

The existing status of GNU/Linux in a world full of patent trolls, which not only target OEMs from Asia -- typically in the US -- but are also dragging them into Europe, aided by the EPO's 'patent bubble'
Shelston IP Blames “Well-Organised and Appropriately-Connected Open Source Lobby” for Ban on Software Patents

The activism is working and foes of programmers are feeling the pressure, for software patents are being more explicitly banned in some countries
The EPO's Latest Lies About the UPC and SMEs Unraveled, Long-Term Plan Described as Daunting

The vision of Battistelli and the latest lies (about SMEs) are being criticised anonymously -- for fear of retaliation -- as Europe braces for impact with patent trolls from all around the world
In an Effort to Push the Unitary Patent (UPC), EPO and the Liar in Chief Spread the Famous Lie About SMEs

The EPO wants people to hear just a bunch of lies rather than the simple truth, courtesy of the people whom the EPO proclaims it represents
Links 21/9/2017: Red Hat's Open Source Patent Promise; Qt 5.6.3, Kali Linux 2017.2 Release

Links for the day
East Asia's Patent Peril and the Curse of Patent Trolls

The high cost of China's new obsession with patents and the never-ending saga of Samsung (Korea), which gets dragged into courts not only in the US but also in China
USPTO Starts Discriminating Against Poor People, and Does So Even When They Rightly Point Out Errors

Even though the burden of proof ought to be on one who grants a monopoly, the legal costs are being offloaded onto those who challenge an erroneously-granted monopoly (even if the court sides with the challenger)
Ambrose Chan Enters Document Security Systems (DSS), a Partly Patent Troll Entity

The Board of Directors of DSS enlists a man from Singapore, whose lack of technical background suggests that the company is still more of a bully than an innovator
UPC Threatens to Weaponise Software Patents in Countries That Forbade These

The reality of software patents in Europe and what a Unified Patent Court (UPC) would mean for these if it ever became a reality
The Latest Lies About the Unitary Patent (UPC) and CIPO's Participation in Those

Team UPC continues to overplay its chances, conveniently ignoring simple facts as well as the Rule of Law
The Patents Policy of Facebook is Causing an Exodus

Yet another major player walks away from Facebook's code because of software patents
Links 20/9/2017: Wine Staging 2.17, Randa 2017, Redox OS 0.3.3

Links for the day
When Google Used Alex Converse to Raid the Public Domain With Software Patents

In its overzealous pursuit of software patents, Google is now turning public domain methods into private 'property' (in defiance of critics)
Mark Kokes, the Man Behind BlackBerry's Patent Aggression, Leaves the Company

The man behind the patent troll-like behaviour of BlackBerry is leaving
WordPress Demonstrates That Facebook's Patent Strategy is Deterring/Alienating Developers

React is being dumped following Facebook's attempt to restrict distribution/derivatives using software patents
Links 19/9/2017: Pipewire, Mir Support for Wayland, DRM in W3C

Links for the day
Links 18/9/2017: Linux 4.14 RC1, Mesa 17.2.1, and GNOME 3.26 on Ubuntu Artful

Links for the day
Patent Trolls Update: Eolas, Conversant (MOSAID), Leigh Rothschild, and Electronic Communication Technologies

Patent trolls are still being watched -- as they ought to be -- even though some of them shy away, hide from the media, engage in dirty tricks, and file more lawsuits
Microsoft is Promoting Software Patents in India in Another Effort to Undermine Free/Open Source Software, Microsoft-Connected Trolls Are Still Suing

The ongoing patent threat to Free/libre Open Source software (FLOSS) and the role played by Microsoft in at least much of this threat
Patent Trial and Appeal Board (PTAB) Under Attack by IBM and Other Patent Parasites Who Undermine Patent Quality

The PTAB, which has thus far invalidated thousands of abstract/software patents, is under a coordinated attack not by those who produce things but those who produce a lot of lawsuit
Why the Mohawk Tribe Should Fire Its Lawyers and Dump the Patents Which Now Tarnish Its Name

In order to dodge the Patent Trial and Appeal Board (PTAB) with its Inter Partes Reviews (IPRs), the Mohawk tribe is being exploited -- very much in direct detriment to its reputation and status
Amazon and Google Have Both Become Part of the Software Patents Problem

The transition from so-called 'defensive' patents to offensive patents (ones that are used to suppress competition) as seen in Amazon and in Google, which is already suing rivals and is pursuing additional patents by acquisition
Unless Physical, Inventions Are No Longer Patent-Eligible in US Courts, But USPTO Ignores Precedence

Even though the ability to enforce software patents against a rival (or many targets, especially in the case of patent trolls) is vastly diminished, the US patent office continues to grant these
Citing the European Patent Convention, Spanish Court Tosses Lawsuit With EPO-Granted European Patent

The quality of European Patents (EPs) -- a subject of growing levels of scrutiny -- as demonstrated in Barcelona this summer
Links 16/9/2017: More of “Public Money, Public Code”, Equifax Failed to Patch for Months

Links for the day