On 12 Jul 2002 at 9:38, Scott Taylor wrote:

>The worse security issues, that I can see, is plain text passwords
>that get sent over the net to port 3050, and that Firebird runs as

BTW plain text passwords aren't sent over the net. Password is
hashed on the client side by DES64 and is going through the net
hashed. On the server side arrived hash is hashed again and then
compared with the stored value.

>root, by default.

Yes, for unix. But on WinNT it is runned under system account by
default, very restrictive. That's the source of many newbies'
questions: "I can't access my DB. OS error 5 - access denied."

SY, Dimitry Sibiryakov.