I actually wonder why the login password is stil only 8 chars. Why not
extend the significant chars of a password to let's say 64? This would
prevent DB access when someone gets the 'security.fdb' file (or the
appropriate IB file). AFAIK the 8 pwd chars may be cracked through a brute
force approach, which is quite easy to do :-(((

Physically encrypting the database file would also make the work of a
potential hacker more difficult !

(no expert)
Jiri