Home All Groups Group Topic Archive Search About

TC - New security model

Author
21 Oct 2005 1:30 AM
Jeff Conrad
TC,

As promised I was going to provide you with any information about the new
security features in Access 12 when I was given permission:

http://blogs.msdn.com/access/archive/2005/10/19/482845.aspx#comments

However, it would appear you beat me to the link!

Author
21 Oct 2005 1:41 AM
TC
Thanks Jeff!

I was hanging out for his security post, but boy - what a surprise. I
can't believe that they have maybe thrown the whole thing out. I'm
hoping that I have misunderstood what he said. Everyone else seems to
be maintaining a stunned silence at this point!

As for the good parts, I was enormously relieved at his comment on DAO
(they won't be breaking it any time soon). So now, the four key
components of my main product (Access, VBA, Jet and DAO) are still
alive.

I guess we'll just have to wait & see on the rest. I hope they've
developed something more relevant (to me, at least!) than Sharepoint
access and safe macros!

Regards,
TC
Author
21 Oct 2005 2:00 AM
Jeff Conrad
Big changes yes. This has raised many questions for sure.

Show quoteHide quote
news:1129858868.636937.86880@g44g2000cwa.googlegroups.com...

> I was hanging out for his security post, but boy - what a surprise. I
> can't believe that they have maybe thrown the whole thing out. I'm
> hoping that I have misunderstood what he said. Everyone else seems to
> be maintaining a stunned silence at this point!
>
> As for the good parts, I was enormously relieved at his comment on DAO
> (they won't be breaking it any time soon). So now, the four key
> components of my main product (Access, VBA, Jet and DAO) are still
> alive.
>
> I guess we'll just have to wait & see on the rest. I hope they've
> developed something more relevant (to me, at least!) than Sharepoint
> access and safe macros!
Author
21 Oct 2005 2:14 AM
Chris Mills
Boy, what a surprise. MVP's promote hacking software and deny same.

Chris

Show quoteHide quote
"TC" <aatcbbtcc***@yahoo.com> wrote in message
>
> boy - what a surprise.
Author
21 Oct 2005 1:52 AM
Chris Mills
The main question is, would a new security model prevent the sort of hacking
transgressions promoted by such low-lifes as Jeff Conrad MVPuh's site?

And what about Lynn Trapp MVPuh's worry, that legitimate users might be locked
out from their own software? Which is his major reason for promoting hacking
software.

Chris
"I must say, this is not what I expected. I expected that you would address
the actual problems that actual people actually have when they actually try to
create a secured database!" Which is HACKING, TC.

Show quoteHide quote
"Jeff Conrad" <je***@ernstbrothers.com> wrote in message
news:ukZ0H8d1FHA.2008@TK2MSFTNGP10.phx.gbl...
> TC,
>
> As promised I was going to provide you with any information about the new
> security features in Access 12 when I was given permission:
>
> http://blogs.msdn.com/access/archive/2005/10/19/482845.aspx#comments
>
> However, it would appear you beat me to the link!
> --
> Jeff Conrad
> Access Junkie - MVP
> http://home.bendbroadband.com/conradsystems/accessjunkie.html
> http://www.access.qbuilt.com/html/articles.html
>
>
>
Author
21 Oct 2005 2:15 AM
TC
Sorry Chris, that's it for me.

PLONK

TC
Author
21 Oct 2005 2:17 AM
Chris Mills
About time.

Chris
Author
21 Oct 2005 5:12 AM
Chris Mills
Let us remember, that it was TC (along with Lynn Trapp) who said hacking
programs were necessary or desirable because of "legitimate usage".

Let us also remember that it was TC who said no further support of his
proposed improved security was necessary, to get MS-Access Development Team to
implement better security.

This is what TC and his cohorts claimed and said, not me. As far as I can
tell, they mounted stupid arguments because they thought themselves under
investigation, and they were. The reasons should be pitifully obvious.

If the reasoning is contradictory, for and against hacking, ask them not me.

Chris
Author
21 Oct 2005 6:27 AM
Chris Mills
For the cracking of most MS-Access security (Database passwords, User-level
security, MDE's, Encryption) follow the links here on Jeff Conrad's website:
http://home.bendbroadband.com/conradsystems/accessjunkie/mdetomdb.html

This link is endorsed by Jeff Conrad, Tony Toews, and Lynn Trapp, MVP's.

For other password crackers (kindly posted by Tom Wickerath) see here:
www.lostpassword.com

Another resource to crack much of the above (not just mde's) is:
http://www.granite.ab.ca/access/createmdbfrommde.htm

Another cracking resource is:
http://www.access.qbuilt.com/html/faq.html
and also downloadable software (at a cost) at:
http://www.access.qbuilt.com/html/products.html
(The Report "Unlocker" -only $119.95!)(for database password, it says)
(The Change Database Properties Tool -in case you removed database
privilege-only $44.95)
(Database Password Changer-only $34.95!!!)(even though you can get similar for
free)

Inserted in the public interest.
DISCLAIMER: I have not used any of these tools, nor do I know how well they
work. Naturally, you must be the owner of the database you wish to CRACK.

Now, how can the "concerned" "TC" and "Jeff Conrad MVPuh" or "Lynn Trapp
MVPuh" help us here?

There must be something I've forgotten, but hopefully I'll remember it soon...
Chris
Author
21 Oct 2005 10:56 AM
Brendan Reynolds
You stepped over the line, Chris. Disagreement is one thing, but the
personal attacks are completely uncalled for.

PLONK

--
Brendan Reynolds

Show quoteHide quote
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote in message
news:%23m0ToIe1FHA.268@TK2MSFTNGP09.phx.gbl...
> The main question is, would a new security model prevent the sort of
> hacking
> transgressions promoted by such low-lifes as Jeff Conrad MVPuh's site?
>
> And what about Lynn Trapp MVPuh's worry, that legitimate users might be
> locked
> out from their own software? Which is his major reason for promoting
> hacking
> software.
>
> Chris
> "I must say, this is not what I expected. I expected that you would
> address
> the actual problems that actual people actually have when they actually
> try to
> create a secured database!" Which is HACKING, TC.
>
> "Jeff Conrad" <je***@ernstbrothers.com> wrote in message
> news:ukZ0H8d1FHA.2008@TK2MSFTNGP10.phx.gbl...
>> TC,
>>
>> As promised I was going to provide you with any information about the new
>> security features in Access 12 when I was given permission:
>>
>> http://blogs.msdn.com/access/archive/2005/10/19/482845.aspx#comments
>>
>> However, it would appear you beat me to the link!
>> --
>> Jeff Conrad
>> Access Junkie - MVP
>> http://home.bendbroadband.com/conradsystems/accessjunkie.html
>> http://www.access.qbuilt.com/html/articles.html
>>
>>
>>
>
>
Author
21 Oct 2005 6:51 PM
Chris Mills
I call hackers masquerading as MVP's as stepping over the line.
Author
22 Oct 2005 5:39 PM
Chris Mills
I must now regard Brendan Reynolds MVP, as being in favour of the promotion of
hacking software by MVP's. That will be the 4th MVP, so he's in good company.

Personal integrity, and the spineless lack of, is what it's all about when it
comes to security.

Chris
Author
22 Oct 2005 7:47 PM
Douglas J. Steele
How would you know anything about personal integrity, given what tripe
you've been posting here Chris?

--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no e-mails, please!)



Show quoteHide quote
"Chris Mills" <phad_nospam@cleardotnet.nz> wrote in message
news:%23gifN%23y1FHA.1028@TK2MSFTNGP12.phx.gbl...
>I must now regard Brendan Reynolds MVP, as being in favour of the promotion
>of
> hacking software by MVP's. That will be the 4th MVP, so he's in good
> company.
>
> Personal integrity, and the spineless lack of, is what it's all about when
> it
> comes to security.
>
> Chris
>
>
>
>
Author
22 Oct 2005 8:03 PM
Chris Mills
I admit making a mistake quoting Tom Wickerath.

Show quoteHide quote
"Douglas J. Steele" <NOSPAM_djsteele@NOSPAM_canada.com> wrote in message
news:ONijlF01FHA.3524@tk2msftngp13.phx.gbl...
> How would you know anything about personal integrity, given what tripe
> you've been posting here Chris?
>
> --
> Doug Steele, Microsoft Access MVP
> http://I.Am/DougSteele
> (no e-mails, please!)
>
Author
23 Oct 2005 6:07 AM
Tom Wickerath
Chris,

I'm mildly curious about your last statement here. How exactly did you
misquote me (not that it would be any real surprise that you did)?

You've been handing out a lot of links in this thread to password cracking
software. I'm kind of surprised that you have not listed a *free* site that
offers downloadable tools to crack both ULS and database passwords. Hint:
"Serge Gavrilov".

Tom

___________________________________________

"Chris Mills" wrote:

I admit making a mistake quoting Tom Wickerath.
___________________________________________

"Douglas J. Steele" <NOSPAM_djsteele@NOSPAM_canada.com> wrote in message
news:ONijlF01FHA.3524@tk2msftngp13.phx.gbl...

How would you know anything about personal integrity, given what tripe
you've been posting here Chris?

--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no e-mails, please!)
Author
23 Oct 2005 7:02 AM
Chris Mills
I didn't mis-quote you, Tom. I said I made a mistake quoting you, which is
different.

I meant I should not have posted the URL you gave. The free one.

Yes I've been handing out a lot of links. It is therefore claimed that I don't
have "integrity". Of course, it is a "demonstration" and strictly limited to
MVP websites, the purported "respectable" ones. Except for your post, but I'll
allow that to lie fallow.

What a surprise. CM can't ensure his integrity by posting links to MVP
websites.

Now listen, Tom. It is probable we are all on the same side in wanting better
security, and there is no reason why that should prevent your associate
"QBuilt" from providing professional recovery services. But that is quite
different from providing cracking downloads, which even TC was against a few
months ago. I am fully prepared to go as far as necessary to expose
"duplicity" regardless of my own reputation, as is perfectly clear.

I do not mean to especially denigrate QBuilt. It is true, from my browsing,
that they would have required at least some details or charge. That certainly
discourages the "casual browser", unlike our "friend" "Serge".

I am very willing to get the discussion onto a more professional footing. I
trust that everyone wants the same. Nevertheless, some of the arguments for
Jeff Conrad (about cracking software and nothing else) seem to me on the verge
of stupidity.

Thankyou for posting.
Chris

(the "free site" was already posted on Jeff and Tony's site. I would never
post such a link myself (hopefully). I was merely demonstrating what CRAP
(whether it works or not) is being posted by supposedly respected MVP's. You
may have thought I was getting at QBuilt, but even if it is that's only a
minor transgression)

Certainly, it gets a bit difficult after 3 months, to separate the crap from
the chaff. QBuilt, of itself, does not appear to be easy to download from.
That's good.

If it comes to integrity, be in no doubt that my "diatribes" are
"demonstrations" of what MVP's (in particular) post. I don't think there's any
doubt that I think nearly this entire newsgroup should be closed down. OF
COURSE, nearly anything can be cracked if the info is made sufficiently
available. At one time it was just "crackers like Serge", now it's mainstream
with MVP's getting in on the act.

Happy to receive measured replies.

Show quoteHide quote
"Tom Wickerath" <AOS168 AT @comcast DOT net> wrote in message
news:F43344A0-BAD3-4DE9-9232-8AA2A5B74EC8@microsoft.com...
> Chris,
>
> I'm mildly curious about your last statement here. How exactly did you
> misquote me (not that it would be any real surprise that you did)?
>
> You've been handing out a lot of links in this thread to password cracking
> software. I'm kind of surprised that you have not listed a *free* site that
> offers downloadable tools to crack both ULS and database passwords. Hint:
> "Serge Gavrilov".
>
> Tom
>
Author
23 Oct 2005 8:07 AM
Tom Wickerath
> I meant I should not have posted the URL you gave. The free one.

I've actually never given out the free one (yet).  I previously gave out
www.lostpassword.com, but that site is not free.


> Yes I've been handing out a lot of links. It is therefore claimed that I don't
> have "integrity".

No one questions your integrity based on providing links to other sites. I
know you have questioned other's integrity for this. Your integrity is
brought into question based on the continued personal attacks that you make.
For example, I was just made aware of a posting you made on October 8th,
where you used my name. I wasn't even involved in that thread at all. Here is
a link to the message I am referring to:
http://groups.google.com/group/microsoft.public.access.security/msg/69fba16d915a6308?hl=en&

My question for you is what would possess you to use my name in this posting?


> It is probable we are all on the same side in wanting better security...

But, it's simply not possible with a "file access" database.  I know how
much you love using Access security, and hate other's revealing it's flaws. I
happen to believe that better security is attainable by educating the public
as to the true weakness of the security model in Access, so that people will
not rely upon it to secure their data.


> Happy to receive measured replies.

Then you'll really need to learn to control your impulses to flame others.
In fact, I decided about two weeks ago to not post back, in
microsoft.public.access, to the thread with subject Re: Photo Storage simply
because of the types of posts elsewhere in this thread that you have
contributed.


Tom

http://www.access.qbuilt.com/html/expert_contributors.html
__________________________________________

"Chris Mills" wrote:

I didn't mis-quote you, Tom. I said I made a mistake quoting you, which is
different.

I meant I should not have posted the URL you gave. The free one.

Yes I've been handing out a lot of links. It is therefore claimed that I don't
have "integrity". Of course, it is a "demonstration" and strictly limited to
MVP websites, the purported "respectable" ones. Except for your post, but I'll
allow that to lie fallow.

What a surprise. CM can't ensure his integrity by posting links to MVP
websites.

Now listen, Tom. It is probable we are all on the same side in wanting better
security, and there is no reason why that should prevent your associate
"QBuilt" from providing professional recovery services. But that is quite
different from providing cracking downloads, which even TC was against a few
months ago. I am fully prepared to go as far as necessary to expose
"duplicity" regardless of my own reputation, as is perfectly clear.

I do not mean to especially denigrate QBuilt. It is true, from my browsing,
that they would have required at least some details or charge. That certainly
discourages the "casual browser", unlike our "friend" "Serge".

I am very willing to get the discussion onto a more professional footing. I
trust that everyone wants the same. Nevertheless, some of the arguments for
Jeff Conrad (about cracking software and nothing else) seem to me on the verge
of stupidity.

Thankyou for posting.
Chris

(the "free site" was already posted on Jeff and Tony's site. I would never
post such a link myself (hopefully). I was merely demonstrating what CRAP
(whether it works or not) is being posted by supposedly respected MVP's. You
may have thought I was getting at QBuilt, but even if it is that's only a
minor transgression)

Certainly, it gets a bit difficult after 3 months, to separate the crap from
the chaff. QBuilt, of itself, does not appear to be easy to download from.
That's good.

If it comes to integrity, be in no doubt that my "diatribes" are
"demonstrations" of what MVP's (in particular) post. I don't think there's any
doubt that I think nearly this entire newsgroup should be closed down. OF
COURSE, nearly anything can be cracked if the info is made sufficiently
available. At one time it was just "crackers like Serge", now it's mainstream
with MVP's getting in on the act.

Happy to receive measured replies.

____________________________________________________

"Tom Wickerath" wrote:

Chris,

I'm mildly curious about your last statement here. How exactly did you
misquote me (not that it would be any real surprise that you did)?

You've been handing out a lot of links in this thread to password cracking
software. I'm kind of surprised that you have not listed a *free* site that
offers downloadable tools to crack both ULS and database passwords. Hint:
"Serge Gavrilov".

Tom

___________________________________________

"Chris Mills" wrote:

I admit making a mistake quoting Tom Wickerath.
___________________________________________

"Douglas J. Steele" <NOSPAM_djsteele@NOSPAM_canada.com> wrote in message
news:ONijlF01FHA.3524@tk2msftngp13.phx.gbl...

How would you know anything about personal integrity, given what tripe
you've been posting here Chris?

--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no e-mails, please!)
Author
23 Oct 2005 9:00 AM
Chris Mills
Well, whatever, it really wasn't necessary to repeat it in this security
newsgroup, Tom. We could all work out what was meant, even your colleagues
ex-US Marines <g> (who presumably know something about security, obfuscation,
etc, etc, which you obviously don't)

I heard, based on your unsolicited prev description of "the best commercial
airplane manufacturer", that you must work for, umm, Airbus? The Boeing lines
are known to be long obsolete - read some aviation articles.

I certainly question the integrity of Jeff Conrad and Tony Toews. Lynn Trapp
merely spouts nonsense not URL's, which he's entitled to justify of course.

As I have consistently claimed, I only spout "respected sites" like MVP sites
or perhaps (at a pinch) QBuilt. What they link to, is for them to sputter not
me.

My links, as you seem to have missed the purpose, are specifically to question
THEIR integrity. The best they seem to come up with, is I should not advertise
their sites. What a crock. Are you or they plain stoopid or something?

Jeff Conrad makes factual falsehoods in his disclaimer description of what
mde-mdb decoding does. You once claimed that meant I was not an averagely good
programmer, which I merely took as a flame and good for you. Go and educate
yourself by reading some of the actual decoding descriptions, then take a
night to sleep and think about it. Jeff Conrad, who we will assume is
technically competent, is therefore nothing less than an outright liar. I said
so it's not misinterpreted, Jeff Conrad is an outright technical liar in
respect of mde-mdb conversions.

> But, it's simply not possible with a "file access" database.
Security? The only thing I said was "better security" (as TC with one of his
hats is pushing). You don't seem to be aware that even SQL*Server can be
cracked. A lot of the munching over SQL*Server, is merely that it has less
cracking available than Access. According to Lynn Trapp, if it's available we
should therefore make it available.

It's unfortunate you mention the "Re: Photo Storage" issue:
1) Ammara has an apparently good product, as endorsed by the guru of such
things, Stephen Lebans
2) You sought to denigrate the poster (not me) as a spammer because he merely
included his URL, indicating he had an interest and expertese in such things
and where he came from. No different from yourself posting a QBuilt commercial
link, if we were to imagine you expert on security.
3) You were technically wrong, as tediously explained by multiple people.
4) So, go figure

Chris
Author
23 Oct 2005 9:17 AM
Chris Mills
5) You sought to claim Allen Browne's website supported your case, when it
actually did no such thing, not even close to doing so.
Author
23 Oct 2005 9:30 AM
Tom Wickerath
Allen's site *exactly* supports my claim. You are the one who has several
problems, including reading comprehension and how to get along with others in
a civil manner when they hold opinions differently than yours.

If you care to send me a personal e-mail message, I will send you a Word
file I compiled as an answer to that thread, before finally deciding that it
just wasn't worth it to get into a pissing match with you in public. By the
way, I sent the same Word document to Bob at Ammara, and I have yet to hear a
responce back from him.

Tom
________________________________________

"Chris Mills" wrote:

5) You sought to claim Allen Browne's website supported your case, when it
actually did no such thing, not even close to doing so.
Author
23 Oct 2005 10:05 AM
Chris Mills
> Allen's site *exactly* supports my claim.
Oh, as you wish, Tom. I once sent a porno to a girlfriend of a Fijian with a
long member (down to his knees), and she replied "You Wish!".

> If you care to send me a personal e-mail message, I will send you a Word
> file I compiled as an answer to that thread,

I don't especially care, Tom. I replied to that post because I have often
replied on imaging, not with my own spouts but one from Microsoft. As usual,
why not send posts to the thread? It's not really me who you need to convince,
I don't count, you decided to take on Ammara and subsequently Stephen Lebans.
Pissing match with me? I barely count in that thread!

Have you thought much more about the number of indirections (addresses to
addresses of things) involved in an operating system written in C or
such-like? Man it's a worry isn't it?

Have a nice day
Chris
Author
23 Oct 2005 10:21 AM
Tom Wickerath
Chris,

Why do you feel the need to digress into the gutter, with stories about
porno pics, instead of using logical thought processes to explain, in your
words, why you feel that Allen's statement did not apply?

> I don't especially care, Tom.
In that case, I'll let you chew on just one small portion of what I had
compiled:
http://groups.google.com/group/microsoft.public.access.queries/browse_frm/thread/93e2fe8b9c382b23/28e0751a3e3b11f6

In message # 13, Peter Miller writes:
"Well, if you have a 'critical system that must be dependable', you
shouldn't be using Jet to store it, but yes, avoiding memo/ole fields can
lead to a lower chance of corruption."

You do know who Peter Miller is, right?  He's the one Microsoft often
references for fixing corrupted databases.


Tom
__________________________________________

"Chris Mills" wrote:

> Allen's site *exactly* supports my claim.
Oh, as you wish, Tom. I once sent a porno to a girlfriend of a Fijian with a
long member (down to his knees), and she replied "You Wish!".

> If you care to send me a personal e-mail message, I will send you a Word
> file I compiled as an answer to that thread,

I don't especially care, Tom. I replied to that post because I have often
replied on imaging, not with my own spouts but one from Microsoft. As usual,
why not send posts to the thread? It's not really me who you need to convince,
I don't count, you decided to take on Ammara and subsequently Stephen Lebans.
Pissing match with me? I barely count in that thread!

Have you thought much more about the number of indirections (addresses to
addresses of things) involved in an operating system written in C or
such-like? Man it's a worry isn't it?

Have a nice day
Chris
Author
23 Oct 2005 10:37 AM
Chris Mills
Tom, why do you feel a need to pursue that Ammara is in some way deficient?
When even Stephen Lebans has endorsed it?

It's OK to be wrong sometimes. It's no reflection to be wrong sometimes. In
some respects, it's the mark of an expert. I remember being wrong once, or
perhaps it was my mother's fault.

Have another nice day
Chris
Author
23 Oct 2005 11:02 AM
Chris Mills
Peter Miller certainly gives a good description. And I think it's
uncontroversial to say we all respect Peter Miller.

Nevertheless, he doesn't really say what the CHANCES of corruption are, and
Ammara and Stephen Lebans say OLE (as used by Ammara) works fine in practise.

So it seems to me this. You TOM merely wish to try to prove a theoretical
point, whether it matters in practise (like the case of Ammara) or not.

What a waste of precious time. The actual facts (for myself) are, my main db
implemented now on some 600 sites primarily with memo fields, works fine and
reliably. Reliably means: yes certainly I've experienced occasional
corruptions, often one site experiences it regularly which suggests some
site-problem possibly the network. No I can't analyse it in detail, hardly
anyone can because it's a live site and if a Repair fixes it then who cares.
Yes most sites run without error or compacting, ever.

So if you merely want to make a point, good for you and the rest of us will
continue using memo or OLE fields as our Access software dictates.

Have you done reliability statistics on x thousand separate image files, all
the filenames stored in Access?

Have yet another nice day, whilst we continue happily along with our crap
software
Chris
Author
23 Oct 2005 6:59 PM
Tom Wickerath
Chris,

I think you are finally admitting, in a round-about manner, that you might
have been wrong, by making the statement: "Nevertheless, he doesn't really
say what the CHANCES of corruption are".  To which I will quote you: "It's OK
to be wrong sometimes. It's no reflection to be wrong sometimes. In some
respects, it's the mark of an expert."

I also did not say that corruption was guaranteed with the memo/OLE
datatype; I simply said that the chances of corruption were increased. I gave
no numbers. I will say that it is not a theoretical point. Even you admit
that "yes certainly I've experienced occasional corruptions, often one site
experiences it regularly which suggests some site-problem possibly the
network."  I'm willing to bet that the operating system is a bit more robust
at handling all of the redirections that you point out, versus Access/JET.

> The actual facts (for myself) are, my main db implemented now on some
> 600 sites primarily with memo fields, works fine and reliably.

Maybe so. You've been lucky. Peter Miller must love all the business that
customers bring to him, based on this type of development practice. As Peter
states in another sentence:

"This is all fine, except of course, if the linkage between the underlying
records and this general extended storage space is broken in any way, in
which case the whole
system starts to break down."

Peter also states that it is not uncommon for people to have undetected
corruption. In another thread that I found he states that once corruption
starts, it can get progressively worse with time, and backups that are not
throughly tested may also be corrupt. You seem to feel that some small amount
of corruption is acceptable and not such a big deal to handle. The fact that
you don't experience it doesn't mean that it's not there, festering like some
carcinoma ready to explode with a weakened immune system. I think it's
attitudes like this that Peter Miller appreciates. It provides a contiual
source of clients who have received bad advise from developers.

My feeling on the matter is that it's more like flying in a commercial jet
aircraft: no rate of failure should ever be considered acceptable, and while
I will continue to use the JET DB engine for obvious reasons of ease of use
and cost avoidance, I will go to extra lengths to minimize any chances of
corruption. This includes only using Memo/OLE datatype when absolutely
necessary, and then by isolating these fields in a separate table.

> Have you done reliability statistics on x thousand separate image files, all
> the filenames stored in Access?
No. Have you?

> What a waste of precious time.
I agree, which is exactly why I'm going to cut it off with this reply.


Tom
____________________________________________

"Chris Mills" wrote:

Peter Miller certainly gives a good description. And I think it's
uncontroversial to say we all respect Peter Miller.

Nevertheless, he doesn't really say what the CHANCES of corruption are, and
Ammara and Stephen Lebans say OLE (as used by Ammara) works fine in practise.

So it seems to me this. You TOM merely wish to try to prove a theoretical
point, whether it matters in practise (like the case of Ammara) or not.

What a waste of precious time. The actual facts (for myself) are, my main db
implemented now on some 600 sites primarily with memo fields, works fine and
reliably. Reliably means: yes certainly I've experienced occasional
corruptions, often one site experiences it regularly which suggests some
site-problem possibly the network. No I can't analyse it in detail, hardly
anyone can because it's a live site and if a Repair fixes it then who cares.
Yes most sites run without error or compacting, ever.

So if you merely want to make a point, good for you and the rest of us will
continue using memo or OLE fields as our Access software dictates.

Have you done reliability statistics on x thousand separate image files, all
the filenames stored in Access?

Have yet another nice day, whilst we continue happily along with our crap
software
Chris
Author
23 Oct 2005 6:07 PM
Tom Wickerath
Chris,

I NEVER made any such statement about Ammara being deficient in any way. I'm
simply flabbergasted that you could make such an interpretation based on the
words I wrote. This is the reading comprehension issue that I keep bringing
up to you.

I'm going to borrow a term from you that you should be familiar with, since
you've used it on other people:

     "You need a mercy-shot to the back of the head."

Ref.: http://groups.google.com/group/microsoft.public.access.externaldata/browse_frm/thread/e263b1978fbbe08c/5db292d5a8fb9789?lnk=st&q=shot+head+author:Chris+author:Mills&rnum=1&hl=en#5db292d5a8fb9789
____________________________________________

"Chris Mills" wrote:

Tom, why do you feel a need to pursue that Ammara is in some way deficient?
When even Stephen Lebans has endorsed it?

It's OK to be wrong sometimes. It's no reflection to be wrong sometimes. In
some respects, it's the mark of an expert. I remember being wrong once, or
perhaps it was my mother's fault.

Have another nice day
Chris
Author
23 Oct 2005 10:06 AM
Tom Wickerath
> We could all work out what was meant, ...

Sorry, but I don't think most people can "work out" the musings of a
paranoid schizophrenic, like yourself.

> The Boeing lines are known to be long obsolete - read some aviation articles.

Think so? You're showing your ignorance once again. The best Airbus can
offer is the A350?  Who's obsolete at this point? I'll match my knowledge
concerning commercial jet transports--and databases, for that matter--with
you *ANY* day. But, I won't tolerate personal attacks. For that, you'll
simply be ignored in the future.

> The best they seem to come up with, is I should not advertise their sites.
I doubt it. I have a feeling that their hit counts go up when someone
controversial, like you, comes along.

> It's unfortunate you mention the "Re: Photo Storage" issue:
> 1) Ammara has an apparently good product, as endorsed by the guru
> of such things, Stephen Lebans

I am not saying, nor have I ever stated, that Ammara's product isn't good.
The issue I raised was whether there is an increased risk of memo/OLE Object
datatypes to corrupt.  Did you happen to notice that Stephen did *not* refute
my position in his posting?  I didn't think so. By the way, I recently
replied to another question and provided a link to Ammara's site.

> 2) You sought to denigrate the poster (not me) as a spammer because he
> merely included his URL, indicating he had an interest and expertese in such
> things and where he came from. No different from yourself posting a QBuilt
> commercial link, if we were to imagine you expert on security.

While you show evidence of being able to read, you apparently have trouble
with reading comprehension!  FACT: I never denigrated Bob as a spammer. In
fact, I didn't even use the term "spam" or "spammer" anywhere in that thread.
I was simply answering Bob's statement, which read: "...and I neither
mentioned nor advocated our product".  My position is that he did, in fact,
mention and advocate his company's product by including the name of the
product and a link in his signature. I didn't say that was necessarily a bad
thing; I merely pointed out the mistruth of his assertion.

> 3) You were technically wrong, as tediously explained by multiple people.

Multiple people, as in two?  Ummm....let's see. Bob from Ammara (who has a
product to sell), and Chris Mills.  That's two people, only one of whom may
be technically competent.


___________________________________________

"Chris Mills" wrote:

Well, whatever, it really wasn't necessary to repeat it in this security
newsgroup, Tom. We could all work out what was meant, even your colleagues
ex-US Marines <g> (who presumably know something about security, obfuscation,
etc, etc, which you obviously don't)

I heard, based on your unsolicited prev description of "the best commercial
airplane manufacturer", that you must work for, umm, Airbus? The Boeing lines
are known to be long obsolete - read some aviation articles.

I certainly question the integrity of Jeff Conrad and Tony Toews. Lynn Trapp
merely spouts nonsense not URL's, which he's entitled to justify of course.

As I have consistently claimed, I only spout "respected sites" like MVP sites
or perhaps (at a pinch) QBuilt. What they link to, is for them to sputter not
me.

My links, as you seem to have missed the purpose, are specifically to question
THEIR integrity. The best they seem to come up with, is I should not advertise
their sites. What a crock. Are you or they plain stoopid or something?

Jeff Conrad ....
<snip>  Sorry, I'm not going to repeat your false accusations here.

> But, it's simply not possible with a "file access" database.
Security? The only thing I said was "better security" (as TC with one of his
hats is pushing). You don't seem to be aware that even SQL*Server can be
cracked. A lot of the munching over SQL*Server, is merely that it has less
cracking available than Access. According to Lynn Trapp, if it's available we
should therefore make it available.

It's unfortunate you mention the "Re: Photo Storage" issue:
1) Ammara has an apparently good product, as endorsed by the guru of such
things, Stephen Lebans
2) You sought to denigrate the poster (not me) as a spammer because he merely
included his URL, indicating he had an interest and expertese in such things
and where he came from. No different from yourself posting a QBuilt commercial
link, if we were to imagine you expert on security.
3) You were technically wrong, as tediously explained by multiple people.
4) So, go figure

Chris
Author
23 Oct 2005 10:26 AM
Chris Mills
Thanks for the amusement, Tom.

Aircraft are a particular interest of mine. There's no doubt that Boeing have
made some of the best, in it's time, and in some ways still do. Certainly our
local airline has just ordered some 777's, I was just testing your
flexibility.

At one time (not now), and to my neverending amusement, was listed on a search
of Boeing at Altavista, firstly Boeing as you'd expect, and the second entry
was Chris Mills with his model twin-rotor Boeing Vertol helicopter. All 5ft of
it.

Boeing aircraft may be good. But so are Airbus, and I suppose Fokker and
Meschersmitt. The hottest model aircraft I ever had was a Kawasaki Hien
"Tony", which a tree on the landing path made a right mess of.

So it's true then. I'm not a perfect pilot. I forgot what the Access part was
about.
Chris
Author
23 Oct 2005 12:59 AM
Chris Mills
Douglas J Steele MVP describes posting URL's to MVP cracking websites as
tripe...

(But Lynn Trapp MVP says it's a service...)
Author
23 Oct 2005 2:00 AM
Chris Mills
There are some MVP's who are prepared to make complete fools of themselves, in
order to avoid the Terrible Wrath of criticising a fellow MVP.

And Doug Steele appears to be one of them.
Author
23 Oct 2005 2:35 AM
Chris Mills
You can find most Access cracking here via these MVP websites:
"The Access Junkie"
http://home.bendbroadband.com/conradsystems/accessjunkie/mdetomdb.html
"Tony Toews"
http://www.granite.ab.ca/access/createmdbfrommde.htm

Cor blimey, Amazing...inserted just in case any poor soul loses their password
or source code like Lynn Trapp MVP is so worried about...never mind it's the
REASON why MSAccess is so insecure...

If the purported MVP's contributing to this purported Security Newsgroup wish
to make such a mockery of the subject, well, I'm game. Maybe Microsoft was
right, back in 1999 or so when they proposed discarding the MVP program.
Merely statistically, it's likely there are some undeserving ones, and so it
seems to prove to be.

Chris
Author
23 Oct 2005 3:34 AM
Chris Mills
Since it seems a bit pointless to continue to add MVP's to the list of errant
ones, I propose to propose to Microsoft discarding the entire MVP program (as
MS originally proposed).

I am also considering whether to support Microsoft's proposal of discarding
the ENTIRE ULS, as they have already stated for Access12, for the simple
reason that WHEN it is cracked we will have MVP's posting the cracks and Lynn
Trapp MVP saying the cracks are needed for the "poor souls who lose their
key".

Therefore, it makes sense to discard all pretence at security. This is the
opinion, intended or not, of all the valuable MVP's to this newsgroup. So
far...

Chris
Author
23 Oct 2005 4:46 AM
Chris Mills
I have no issue with Doug Steele flaming, which is water off a "Canada Duck"'s
back.

It's just such a pity he has NO opinion on Microsoft Access Security. And
purports at the same time to advise this newsgroup occasionally.

Chris
Author
23 Oct 2005 6:29 AM
Chris Mills
Yet, it would be such a pity to discard the MVP program, merely because we
have a few errant MVP's like JEFF CONRAD and LYNN TRAPP.

What about Tony Toews? He's just an empty-head who never actually thought
about it, and I'm trying my best to be kind.

Chris