Advanced SQL Injection in Oracle databases

Tiffanyinbody

Description

• exposé - matière potentielle : sql
• exposé
• exposé - matière potentielle : with elevated privileges

Esteban Martínez Fayó Advanced SQL Injection in Oracle databases February 2005

• direct connection
• executes with the privileges of the owner
• many vulnerabilities
• sql statements with elevated privileges
• dependent transaction inside the transaction context of the vulnerable sql statement
• sql injection
• database

Sujets

• Exposé
• Capital punishment
• Martínez
• Oracle
• Transaction
• Privilège
• Statement
• Elevated railway
• Database
• Connection

Informations

• Publié par: endoe
• Nombre de lectures: 19
• Langue: English

Extrait

Features

The Author Who Never Was: Nicolas Bourbaki

Claudia Clark

“Secret societies.” These words may call to mind two recent bestsellers,The DaVinci 1 2 CodeandAngels and Demons. These books tell the stories of ancient societies, shrouded in mystery, that used mathemat ics to protect themselves and their beliefs. Look into the more recent past, and you’ll find another secret society, but a very dif ferent one. Begun in France in the middle 1930s, this secret society has consisted of a small group of mathematicians—in the middle 1950s membership was estimated to be 3 “about 12”—who wrote a mathemati cal treatise “without which 20thcentury mathematics would be . . . quite different 4 from what it is”.The typical member was a graduate of the École Normale Supérieure, generally considered the most prestigious 5 institution of tertiary education in France. At its most productive, the group wrote 3 one or two volumes per year.Members have includedsome of the century’s great 6 est mathematicians,such as 1994 Kyoto Prize winner André Weil—also a group founder—yet no official membership list 7 has ever been published.And because new members have joined as old ones 3 retired, thegroup still exists. They call themselves Nicolas Bourbaki. With authorship issues in scientific publication having received much recent 8 attention, theBourbaki model of author ship seems especially interesting to consid er. What was this group of mathematicians known as Bourbaki, and how did it begin? What did it accomplish and how? How did this unusual authorship structure affect interactions with publishers? And who had ownership rights to the books, and who

C LAUDIA  C LARK ,a 2003 American Association for the Advancement of Science Mass Media fellow and a science and math ematics writer, prepared this article while a Science Editorintern.

received the royalties? In search of answers to those questions, I’ve read the accounts of Bourbaki members and interviewed for mer members and publishing professionals who have worked with Bourbaki.

The Founders and the Foundations In late 1934, in Paris, a group of young mathematics professors who were educated at the École Normale Supérieure met in a café to discuss the writing of a mathematics treatise. That they would consider writing a text for a course one of them was teach ing was not unusual: French university mathematics professors of the time did that 9 regularly. Butthe goal they would shortly decide to pursue—and estimate that they 10 would complete “in about three years”— was definitely unusual. Their goal was the writing of a math ematical treatise, calledÉléments de Mathématique (Elements of Mathematics), that would “provide a solid foundation for the whole body of modern mathemat 11 ics”. Theuse of the singularmathématique reflected Bourbaki’s belief in the unity 12 of all of mathematics : they sought to “expose the fundamental concepts com 13 mon to all branches of mathematics”. The notsosubtle play on the title of Greek mathematician Euclid’s classic trea 7 tise on geometry,Elements of Geometry, implied not only that their conception of mathematics was “illuminating and useful for dealing with thecurrentof concerns mathematics, but that this was in fact the ultimate stage in the evolution of math ematics, bound to remain unchanged by 14 any further development of this science”. The result was not intended to be a text book “for everybody”, but a reference, an 3 “encyclopedia” of mathematics,a “tool” 10 for experts.Bourbaki would start from 12 scratch, assumingvery little, and proceed stepbystep to prove the rest. References were made only to other (earlier) works in this treatise—readers were to read

82 • Science Editor • May – June 2005 • Vol 28 • No 3

the volumes in a “rigorously fixed logical 4 order” —withthe exception of the sec 12 tions that provided historical context. Bourbaki created its own terminology and notation to avoid the existing, often inex 4 act use of language.Because Bourbaki was “try[ing] to make each part of mathematics as general as possible in order to obtain the widest possible domain of applicabil 3 ity”, anyheuristic remarks, to assist the reader, were “almost invariably thrown out” of proposed drafts as being “too vague, ambiguous, impossible to make precise in a few words”. The resulting volumes were 12 considered very abstract.However, they also contained “Supplements”—sections that included “excellent” exercises for the 4 reader. Given the circumstances, Bourbaki’s goal made perfect sense. French mathemat ics suffered after World War I: Much of an entire generation of mathematicians who would have been doing research, as well as teaching and mentoring the generation to which Bourbaki belonged, had been killed during the war. Consequently, one found ing member of Bourbaki noted that his generation had graduated from the École Normale Supérieure without being taught 10 some basic mathematical concepts.And generally, the existing study of mathemat ics in France lacked the “rigor” found in other countries, such as Germany, which was “dominating science at that time”: “partly due to rancor after [World War I], people in the scientific establishment were not ready to accept the German 7 method of science”.This group of young men, who would later be referred to as the 15 “Founders”, wouldchange that. Because Bourbaki began as a “rebellion of a group of young people against the establishment”, members wanted to pro tect their reputations and avoid attaching a long list of authors’ names to their works. Therefore, they decided to give themselves a pseudonym. And anonymity was a small price to pay for the spirit of being “knights,