Oracle Zero-Day Flaw Project Cancelled

Benny Folds writes "Cesar Cerrudo of Argeniss has suddenly cancelled plans to release daily zero-day flaws in Oracle databases during the first week in December. Just days before the project was due to start, Cerrudo announced that 'due to many problems,' the WoODB (Week of Oracle Database Bugs) is being scrapped. He did not elaborate on the reasons for the cancellation."

oracle

[crushkill]

he probably wanted to focus more on family issues, since its christmas season

They didn't cancel the project!

[Anonymous Coward]

The fully patched oracle backend to their web server crashed and it just appears the project is off.

LOL

[1001011010110101]

1. Start a security consulting firm
2. Request 0 day vulnerabilities from everyone for an event
3. Cancel Event
4. Profit!

If only

[vga_init]

If only they would cancel the production of flaws too. :-/

With good reason

[SuperKendall]

One reason may have been the scary looking bearded dude holding a samurai sword staring at him through the window every day...

The two thugs who visited his family

[stox]

had nothing to do with it. They were just trying to let him know about a new life insurance plan.

Re:Fear Him!

[udderly]

Have a look [zpub.com]--it's obvious that this guy's a homicidal manic.

From the main page:

It's an old joke in Silicon Valley. Q: What's the difference between God and Larry Ellison? A: God doesn't think he's Larry Ellison.

I think the phone call went like this

[User 956]

Cesar Cerrudo of Argeniss has suddenly cancelled plans to release daily zero-day flaws in Oracle databases during the first week in December.

I think the phone call with Oracle went like this: "Hi, Is this Cesar? Yeah, this is Oracle. We found a suitcase full of money, we think it belongs to you."

Re:I think the phone call went like this

[jonnythan]

More like "We found a suitcase full these funny red sticks with clocks attached. Where did your wife park her car today?"

Cancelled due to lack of poverty

[192939495969798999]

"Due to this new lack of poverty, er I mean bugs, the oracle bug project has been cancelled."

Re:I think the phone call went like this

[Anonymous Coward]

Will the security researcher be driving his usual car home tonight?

after what happened to the head of Siebel...

[SuperBanana]

One reason may have been the scary looking bearded dude holding a samurai sword staring at him through the window every day...

Seems a reasonable concern, given we all know what happened to the head of Siebel [slashdot.org].

Re:With good reason

[bill_mcgonigle]

This isn't too hard to figure out. Look at the announcement retraction page. See that field of seemingly unimportant binary numbers in the background? Run it through OCR and take the digits as sets of 16-bit big-endian numbers, and you come up with the following numbers: 17,21,39,76,203,230,238,245,279. Now, look at the letters at each of those positions in the announcement and you get:

The Week of OracLe DAtabase Bugs

We aRe sad to announce that due to many pRoblems the Week of Oracle Database Bugs gets suspended.

We would like to ask for apologizes to people who supported this and were reallY excited with the idea, alSo we woUld likE to thank the people who contributeD with Oracle vulnerabilities.

Coincidence? Yeah, sure.

The Truth.. 6 bugs just won't cut it..

[madsheep]

Well it's obvious why it had to be cancelled guys. When you have a week that's 7 days long and you can only come up with 6 bugs, you've got to cancel the things. Imagine the embarassment of starting on Sunday.. getting to Saturday and being one short.

Simple

[Billosaur]

Larry Ellison assured him there were no flaws in Oracle.

the database

[BSAlert]

I heard his gold level support expired and his database system crashed and he couldn't recover the list of bugs.

Re:I think the phone call went like this

[Tim C]

Probably more like "We have a room full of lawyers, we think they'd like to talk to you".

His bug database crashed

[Bright Apollo]

Maybe we should create a communal top-ten?

1) His Oracle XE database of bugs crashed
2) He looked on Metalink and found them all listed under "fixed in 11g"

et al...

Re:oracle

[icebike]

Or equally likely, the mysterious packet slipped under his door at
midnight with pictures of his loved ones photographed through
that sniper scope sort of changed his priorities.

Why is that same white van parked across the street again...

List of exploits was stored in...

[belphegore]

Obviously, his list of exploits to be published was stored in an Oracle DB, which got hacked.

Receptionst: Cesar, Mr Ellison is on line 1

[sp3298622]

L: Cesar, Listen, there are no vulnerabilities in Oracle - Cancel your show
C: No bugs!? You're kidding, I have had so many submissions, I might have to extend it to a month!
Receptionist: Cesar, you're wife is in line two, something about the power at home being off, do you want to take it now?
C: Just a sec, I am giving our old buddy here the low-down
L: As I was saying, there are NO vulnerabilities
C: what are you talking about, I just said...
Receptionist: Cesar, it's Bobby on line three, he's asking if it's ok if he goes and plays with this new friend he met?
C: What new friend? he's home sick today! I'll take it in a minute.
L: So about those vulnerabilities, you sure about that?
C: Larry, you must be living in LA LA Land, what don't you understand?
Receptionist: Cesar, it's your mom on Line four, she's saying thanks for arranging the nice social worker and he's going to take her for a quiet relaxing walk.
C: social worker? I don't remember anything about that, ask her to ...
L: Cesar, I don't think you understand.
C: I don't understand?! you are the who doesn't understand, I am going to disclose every single...
Receptionist: Cesar, Your dad just called to ask where exactly is that restaurant he's suppose to meet you for lunch at 12?
C: Lunch? I am going to see him tomorrow for dinner..
L: Optimistic fella you are ol' Cesar.
C: hmm, well actually now that you mention it, there weren't really that many submissions.
L: Well, are we still on for Golf then?