June 18, 2013

Post: NO Security vulnerability in Percona Server / XtraDB Cluster provided binaries

Many of you heard of this nasty security vulnerability in MySQL, and as we are getting a lot … 5.1.62 or earlier may be affected by this security vulnerability. You can test if it is, using, for example…

Post: Secure passwords being insecure

… you follow the general advices to create secure password the following ones seem to be secure, right? s11P$||!sh&2 pr0&!!ke0…

Post: Percona Server security fix releases

… ® announced 5.0.91 and 5.1.47 with serious security fixes, so we provide binary releases of Percona Server 5.0 and Percona Server / XtraDB 5.1 with security patches. Fixed bugs: Bug#53371, CVE-2010-1848 Bug#53237…

Post: Security fixes for MySQL 4.0 and 4.1

In Percona Server security fix releases I mentioned patches for MySQL 4.0 and …

Post: Can't Create Thread: Errno 11 (A Tale of Two Ulimits)

… limits file, 90-nproc.conf, which appeared in the /etc/security/limits.d folder and contained the following: # Default limit for…/thread limit changes that you may have made to /etc/security/limits.conf! So even if you’ve properly adjusted /etc… no changes of any kind made to /etc/security/limits.conf or /etc/security/limits.d/90-nproc.conf – it’s just…

Post: SQL Injection Questions Followup

… misconceptions that many other blogs and articles have about this security risk.  You can register for the webinar even now that… Parameters (particulary OdbcParameter class in .NET) qualify as an appropriate security mechanism for normal WHERE interpolation? Or should the input be….  Your site is only as secure as its weakest link, which makes coding and testing for security very challenging.  Whereas with performance…

Post: High availability for MySQL on Amazon EC2 – Part 4 - The instance restart script

… best way to list those application servers is through a security group and, provided the appropriate ssh keys have been exchanged… -C $CERT | /usr/local/bin/filtre_instances.pl | grep $CLIENT_SECURITY_GROUP > $TMPFILE while read line do IP=`echo $line | cut… rm $TMPFILE The full script: #!/bin/bash HA_SECURITY_GROUP=testyves CLIENT_SECURITY_GROUP=hamysql-client CLIENT_SCRIPT=/usr/local/bin/update…

Comment: INSERT ON DUPLICATE KEY UPDATE and REPLACE INTO

…) NOT NULL, PRIMARY KEY (`person_id`), UNIQUE KEY `social_security_number` (`social_security_number`) ) ENGINE=InnoDB DEFAULT CHARSET=latin1; TRUNCATE TABLE person… and on MyISAM, the results are: +———–+——-+————————+ | person_id | name | social_security_number | +———–+——-+————————+ | 1 | Alice | 123456 | | 3 | Bob | 787878 | +———–+——-+————————+ If the primary…

Post: High availability for MySQL on Amazon EC2 – Part 2 - Setting up the initial instances

… networking purposes and the help identify them. To create a security simply run this command: yves@yves-laptop:~$ export EC2_CERT… shell. Next, we need to authorize some communications for the security group. I’ll authorize 3306/tcp (MySQL) from hamysql, 694… EC2 does not support neither broadcast or multicast within the security group, we need to use unicast (ucast) so both files…

Comment: What to tune in MySQL Server after installation

…:664) at java.security.AccessController.doPrivileged(Native Method) at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:76) at java.security.ProtectionDomain$1.doIntersectionPrivilege…$4.run(EventQueue.java:678) at java.security.AccessController.doPrivileged(Native Method) at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:76) at…