never-ever-****-with-my.net

As reported by Computerworld, Oracle released a tool designed to find default passwords in its database software (among several other critical patches).

While default accounts have been locked down in current versions of the database, Oracle 10g databases that have been upgraded from Oracle 7, Oracle8i, or Oracle9i may include them.

The Oracle Default Password Scanner consists in a SQL script accessible to Oracle customers in MetaLink Note 361482.1.

It should be noted that Cain & Abel carries features to crack and extract Oracle passwords.

John the Ripper 1.7 has been out for nearly a month now (missed that).

As outlined in Solar Designer's announcement, JtR 1.7 became a lot faster (primarily at DES-based hashes), improves on the use of processor specific instructions sets (i.e. MMX on x86), adds an event logging framework and plenty of pre-configured make targets with optimal settings (including for OpenBSD).