David Litchfield is a very well known researcher in the field of database security. He's been at it for over a decade, and managed to be a permanent pain in Oracle's neck since he first started dropping database 0day a million years ago.
So I asked him what has changed in the field of database security. Has Oracle improved its procedures?
