Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oracle attempt to hide cybersecurity incident from customers?

doublepulsar.com

Post reply on HN
Print view View original

41–50 of 136 posts

Re: Oracle attempt to hide cybersecurity incident from customers?

#41

Post by wruza »

MPSFounder wrote: post #23
lucianbr wrote: post #18

Earlier quoted context omitted.

I'm guessing nobody chooses to work with Oracle anymore for reasons or in situations that we would consider reasonable. It's probably either governments contracts, with or without corruption, companies already locked in, contracts made by executives that don't really understand technology, that sort of thing.

Actually, it is mostly companies who are too reluctant to change. If it works, keep it as is, even if better technologies are the norm nowadays. Maybe this will help them move away from this obsolete Larry Ellison crapshot

If it works, keep it as is

That's a good principle though. It doesn't make the initial choice good today or even back then. But change is always a risk that may not be worth it, cause you have to make sure that the inevitable semi-chaos coming with it is at all times lower than what you have. And analyzing that may be hard.

Maybe this will help them move away from this obsolete Larry Ellison crapshot

This creates positive incentives, so yes.

Iow, everything probably goes as it should, really.

Re: Oracle attempt to hide cybersecurity incident from customers?

#42

Post by sylens »

nerdjon wrote: post #7

This is honestly wild. Whether we like it or not security incidents have become such common place in the last several years that if they just admitted to it this entire story would have likely been shrugged off and mostly forgotten about in a couple days but instead it is turning into an entire thing that just seems to be getting deeper and deeper. (Not downplaying the security incident, but that is the unfortunate r…

Security incidents have become so common place that the fact that they happen is not the newsworthy event; rather, its how a company responds to them that is the newsworthy event. And Oracle flunked this test

Re: Oracle attempt to hide cybersecurity incident from customers?

#43

Post by stackskipton »

praptak wrote: post #38
asciii wrote: post #14

Earlier quoted context omitted.

I believe enterprise customers are not going to care much unless it helps with lowering existing costs. OTOH, Oracle as part of BSA can demand an audit so they will inflict / make up reason to also punish (i.e. licensing or pull support). The business could invoke an MSA punishment clause and win temporarily but it will cause a headache going forward (further demands from Oracle, higher costs etc.) Either way, Oracle…

Unless the customer already wants to ditch Oracle.

Very few companies want to business with Oracle (or IBM). Most are either stuck with either and costs of switching are too high for executive to greenlight.

Re: Oracle attempt to hide cybersecurity incident from customers?

#45

Post by MPSFounder »

wruza wrote: post #41
MPSFounder wrote: post #23

Earlier quoted context omitted.

Actually, it is mostly companies who are too reluctant to change. If it works, keep it as is, even if better technologies are the norm nowadays. Maybe this will help them move away from this obsolete Larry Ellison crapshot

If it works, keep it as is That's a good principle though. It doesn't make the initial choice good today or even back then. But change is always a risk that may not be worth it, cause you have to make sure that the inevitable semi-chaos coming with it is at all times lower than what you have. And analyzing that may be hard. Maybe this will help them move away from this obsolete Larry Ellison crapshot This creates pos…

I somewhat agree. I think for tangible things (cars), you don't need to reinvent the wheel. But, tech moves fast. If a superior tech (for instance, more secure) is available but requires some discomfort (moving things around), then it is worth it to avoid this type of crap

Re: Oracle attempt to hide cybersecurity incident from customers?

#46

Post by noja »

legitster wrote: post #40

If you are already a customer of Oracle, I can't imagine this matters to you. You did not choose Oracle because it was a good product and they are a good company. You are a customer of Oracle because there was a backroom executive deal with the Devil. No one is surprised or outraged or even has any choices.

If the tables were turned, Oracle would be taking advantage of the situation.

Take note.

Re: Oracle attempt to hide cybersecurity incident from customers?

#47

Post by redleggedfrog »

legitster wrote: post #40

If you are already a customer of Oracle, I can't imagine this matters to you. You did not choose Oracle because it was a good product and they are a good company. You are a customer of Oracle because there was a backroom executive deal with the Devil. No one is surprised or outraged or even has any choices.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop."

He's a big Zed Shaw fan.

Re: Oracle attempt to hide cybersecurity incident from customers?

#48

Post by xdavidliu »

redleggedfrog wrote: post #47
legitster wrote: post #40

If you are already a customer of Oracle, I can't imagine this matters to you. You did not choose Oracle because it was a good product and they are a good company. You are a customer of Oracle because there was a backroom executive deal with the Devil. No one is surprised or outraged or even has any choices.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop." He's a big Zed Shaw fan.

what's "streak"? do you mean steak?

Re: Oracle attempt to hide cybersecurity incident from customers?

#49

Post by legitster »

redleggedfrog wrote: post #47
legitster wrote: post #40

If you are already a customer of Oracle, I can't imagine this matters to you. You did not choose Oracle because it was a good product and they are a good company. You are a customer of Oracle because there was a backroom executive deal with the Devil. No one is surprised or outraged or even has any choices.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop." He's a big Zed Shaw fan.

Anytime Oracle is brought up is a great time to repost the famous Lawnmower quote:

> "As you know people, as you learn about things, you realize that these generalizations we have are, virtually to a generalization, false. Well, except for this one, as it turns out. What you think of Oracle, is even truer than you think it is. There has been no entity in human history with less complexity or nuance to it than Oracle. And I gotta say, as someone who has seen that complexity for my entire life, it's very hard to get used to that idea. It's like, 'surely this is more complicated!' but it's like: Wow, this is really simple! This company is very straightforward, in its defense. This company is about one man, his alter-ego, and what he wants to inflict upon humanity -- that's it! ...Ship mediocrity, inflict misery, lie our asses off, screw our customers, and make a whole shitload of money. Yeah... you talk to Oracle, it's like, 'no, we don't fucking make dreams happen -- we make money!' ...You need to think of Larry Ellison the way you think of a lawnmower. You don't anthropomorphize your lawnmower, the lawnmower just mows the lawn, you stick your hand in there and it'll chop it off, the end. You don't think 'oh, the lawnmower hates me' -- lawnmower doesn't give a shit about you, lawnmower can't hate you. Don't anthropomorphize the lawnmower. Don't fall into that trap about Oracle." - Bryan Cantril

Re: Oracle attempt to hide cybersecurity incident from customers?

#50

Post by devsda »

sofixa wrote: post #16
nerdjon wrote: post #7

This is honestly wild. Whether we like it or not security incidents have become such common place in the last several years that if they just admitted to it this entire story would have likely been shrugged off and mostly forgotten about in a couple days but instead it is turning into an entire thing that just seems to be getting deeper and deeper. (Not downplaying the security incident, but that is the unfortunate r…

> Seriously if I can't trust that I am going to actually be told and not lied too when there is a security incident at the bare minimum, why would I chose to work with a company? What is Oracle's end goal here? I think you're coming at this from the wrong point of view. Oracle couldn't care in the slightest about what regular people think of them. Remember, they are the company that sent lawyers after the employers o…

> everyone who worked there has a black mark on their CV

I hope this is hyperbole. Rank and file employees are not responsible for corporate policy or direction, especially in places like Oracle.

Post reply on HN