Pete Finnigan's Oracle Security Weblog

There is a second thread on the comp.databases.oracle.server newsgroup that has the same Oracle password transform (algorithm) posted to it by presumably the same guy as the other thread I pointed to last night, this time with a different (abusive) name. The post (I will not repeat the title) includes a second post by the OP that has some C code that looks like it is part of a password check program. The actual encryption routines are not included.

It seems that this guy has been busy as he has also posted the same text to the Unix Documentation Project as "How to crack an Oracle password info". I have done some quick searches and found that it looks like he has posted this same information 3 times on July 17, August 11 and August 19.