--- In firebird-support@yahoogroups.com, Geoff Worboys <geoff@t...>
wrote:

> There have been some very long standing and quite glaring
> holes in Firebird security (mostly items outstanding from the
> days as Interbase).

Probably due to the nature of the beast. IB/FB seems to have been
designed as a developers internal database where it would be used by
an application and not directly by the users.

> The fact that these have continued to exist for so long I
> think must reflect the nature of implementations used (insider
> attacks are not considered to be of critical importance for
> all installations).

Since everything we do is web based, my clients typically don't
have/need/want direct access to the database anyway. But in the
grander scheme of things, it is and will be important.

> I setup the application to "hash" the input passwords for all
> non-administrative users.

That's an novel and effective way to go about it.