Chadders
banner
martinchadderton.bsky.social
Chadders
@martinchadderton.bsky.social
Software Architect specialising in Oracle (OCA, OCP and OCE), Python, Lua, Javascript, Linux, Pentesting, DevSecOps and Retro Computing
Reposted by Chadders
NEW VID: 10 Arcade Treasures from 1981! We've got the important scrolling platformer Jump Bug, infamous Donkey Kong bootleg Crazy Kong, Pac-Man-style games like Piranha and Streaking, the unreleased War of the Worlds arcade and plenty more. Enjoy and please share :) youtu.be/gpk6Y4rWKkg
10 Classic Arcade Treasures from...1981 | Kim Justice
YouTube video by Kim Justice
youtu.be
August 9, 2025 at 3:02 PM
Reposted by Chadders
Still wrapping PL/SQL like it’s 2007? Stop it! The Oracle Database 9iR2 wrap utility is holding you back.

Learn why, and check out my new PL/SQL Unwrapper for VS Code.

www.salvis.com/blog/2025/03...
Wrapping and Unwrapping PL/SQL
Introduction Today I released a PL/SQL Unwrapper for VS Code. You can find it in the VS Code Marketplace, along with instructions on how to use it. It’s super easy and works the same way as the extens...
www.salvis.com
March 8, 2025 at 5:10 PM
Reposted by Chadders
Do you like to point fingers at "wrong"?
Ask what can go wrong, instead, before it's too late!

Play OWASP Cornucopia!

The waiting time is over. OWASP® Cornucopia Website App 2.1 & Mobile App 1.1 have been released! see: dev.to/owasp/owaspr...

#appsec #cybersec #threatmodeling #owasp
February 20, 2025 at 1:40 PM
Reposted by Chadders
Today's fun discovery

ALTER SESSION DISABLE COMMIT IN PROCEDURE

=> if a PL/SQL procedure has a commit it raises an ORA-00034 instead!
=> you can rollback across PL/SQL calls with commits

Note: DML in the proc is rolled back unless you catch the ORA-34

This "new" feature is at least 20 years old!
February 20, 2025 at 9:54 AM
Reposted by Chadders
The waiting time is over. OWASP® Cornucopia Website App 2.1 & Mobile App 1.1 have been released! see: dev.to/owasp/owaspr...

Want developers to do threat modeling?
Don't do all the heavy lifting!

Play OWASP Cornucopia!

The 2.1 release is here!

#appsec #threatmodeling #cybersec #owasp
February 17, 2025 at 11:14 AM
Reposted by Chadders
Use dot-notation to access attributes of stored #JSON with Oracle #SQL

SELECT tab.jcol.attr

This returns a JSON data type => implicit conversions & poor plans

Use type methods to cast the value and avoid these problems

SELECT tab.jcol.attr.number()

@salvis.com demos
Avoid Implicit Type Conversion in JSON Access - Philipp Salvisberg's Blog
Discover why explicit JSON value conversion in SQL is essential for best performance and how to apply it in your code.
buff.ly
February 11, 2025 at 12:00 PM
Reposted by Chadders
6.12.8: stable Version: 6.12.8 (stable) Released: 2025-01-02 Source: linux-6.12.8.tar.xz PGP Signature: linux-6.12.8.tar.sign Patch: full ( incremental ) ChangeLog: ChangeLog-6.12.8 https://www.kernel.org #linux #kernel
www.kernel.org
January 2, 2025 at 12:15 PM
Reposted by Chadders
Recommended reading for Oracle Database

Deep dive on Binary JSON formats (the first in a series) from @loiclefevre.bsky.social

medium.com/db-one/jsonb...
JSONB, BSON, OSON…  A deep dive into Binary JSON formats
If you’ve used JSON to store and manage data, you’ve likely faced situations where the format seemed to fall short of your expectations…
medium.com
January 2, 2025 at 12:33 PM
Reposted by Chadders
A buddy and I are working on a site to promote and share technical information about HTTP security headers:

owasp.org/www-project-...
OWASP Secure Headers Project | OWASP Foundation
Provides technical information about HTTP security headers.
owasp.org
December 20, 2024 at 6:00 AM
Reposted by Chadders
Checking if rows match some criteria?

Instead of

SELECT COUNT(*) FROM ...

Use

EXISTS ( SELECT * FROM ...

COUNT gets all the rows; EXISTS can stop when it finds a match

As @lukaseder.bsky.social says

Thou shalt not use COUNT(*) when EXISTS sufficeth thy need
Avoid using SQL COUNT(*) when you could use SQL EXISTS
When checking for the existence of data, avoid using COUNT(*) > 0 as many implementations will nto be able to avoid the work of calculating the exact count
buff.ly
December 10, 2024 at 12:00 PM
Reposted by Chadders
NEW VID! The 2nd half of my look at Atari's Unreleased Arcade Games. This one goes from 1985 to 2000 and there's all sorts of interesting stuff, from the cancelled Primal Rage and Marble Madness II to Beavis and Butt-Head. Enjoy and please share :) youtu.be/4RvkXUZBnsU
The Unreleased Arcades of Atari Games, 1985-2000
YouTube video by Kim Justice
youtu.be
December 10, 2024 at 5:22 PM
Reposted by Chadders
6.12.4: stable Version: 6.12.4 (stable) Released: 2024-12-09 Source: linux-6.12.4.tar.xz PGP Signature: linux-6.12.4.tar.sign Patch: full ( incremental ) ChangeLog: ChangeLog-6.12.4 https://www.kernel.org #linux #kernel
www.kernel.org
December 9, 2024 at 11:15 AM
Reposted by Chadders
@oej.edvina.net and the OWASP TEA WG want to implement life cycle events for the SBOM standard. Anyone that cares about software maintenance should follow this work. It is essential for fixing the way we manage our #technical-debt and get #CRA certified. #cybersec owasp.org/blog/2024/11...
December 9, 2024 at 5:35 AM
Reposted by Chadders
Read more about what OWASP TEA WG together with @oej.edvina.net is doing and why it is essential for your #CRA (Cyber Resilience Act) certification and managing your #tech-debt here: owasp.org/blog/2024/11...

#cybersec #appsec #infosec
Lifecycle events are part of the secure supply chain | OWASP Foundation
Lifecycle events are part of the secure supply chain on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
owasp.org
December 9, 2024 at 7:14 AM
Reposted by Chadders
#Oracle #Database 23.6 Free multi-platform images now available on gvenzl/oracle-free
Oracle Database 23.6 Free multi-platform images now available on gvenzl/oracle-free
Oracle Database 23.6 Free multi-platform images are now available on container registries docker.io/gvenzl/oracle-free and ghcr.io/gvenzl/oracle-free.
geraldonit.com
December 8, 2024 at 1:41 AM
Reposted by Chadders
If you’re curious about the design and analysis of encrypted algorithms and encrypted databases, I’m putting together a collection of resources at encryptedsystems.org
EncryptedSystems.org
encryptedsystems.org
December 3, 2024 at 4:02 PM
Reposted by Chadders
New Video!
There are some quirky ways of going past the limit of 1000 elements in a SQL IN-LIST. But that doesn't mean you should be doing it.
youtu.be/UuZGDb_9r0I
Blasting past the 1000-item limit for IN-LIST
YouTube video by SQL and Database explained!
youtu.be
December 2, 2024 at 4:49 AM
Reposted by Chadders
Yesterday, Greater Manchester approved free travel passes for young people who have experienced care up until the age of 25.

Through devolution, important progressive steps continue to be made.
November 30, 2024 at 8:42 AM
Reposted by Chadders
why pipes sometimes get "stuck": buffering jvns.ca/blog/2024/11...
November 29, 2024 at 4:41 PM
Reposted by Chadders
Reasons why SELECT * is bad for SQL performance (2020)

tanelpoder.com/posts/reason...
November 23, 2024 at 6:14 PM
It's always great to watch videos by @kimjustice.bsky.social, the quality of the research and the content is excellent. This one clearly needed a lot of research and was very interesting. youtu.be/N8lP75g78OI?...
The UNRELEASED Arcade Games of Atari Inc., 1976-1984
YouTube video by Kim Justice
youtu.be
November 24, 2024 at 4:34 PM
Reposted by Chadders
sqlite-vec v0.1.6 is now out, with metadata support!

SQLite vector search w/ metadata filters 👀

- Perform extra filtering w/ WHERE clause in KNN queries
- Internally shard vector indexes with partition keys
- Aux columns for easy lookups

read more: alexgarcia.xyz/blog/2024/sq...
sqlite-vec now supports metadata columns and filtering
Metadata, partition key, and auxiliary column support in sqlite-vec
alexgarcia.xyz
November 20, 2024 at 4:48 PM
Reposted by Chadders
OWASP Members Benefit: OWASP-reserved instance on the @SecureFlag secure coding training platform & the AI-powered threat modeling tool ThreatCanvas: www.secureflag.com/o...

Join the #OWASP community today & start building secure software! #securecodingtraining #threatmodeling
SecureFlag x OWASP
SecureFlag and OWASP have partnered to offer OWASP members access to a reserved instance of the SecureFlag platform.
www.secureflag.com
November 20, 2024 at 8:57 PM