Telegram in application with DB connection

ConquestSS announced that the communication channel Telegram was involved into SQLDetective (SD). It means that PC with installed SD should have opened Internet. As SD works with Oracle DB then application and database settings may be stolen or hacked. For example, SD stores DB connections without encryption, it's possible to store the connection passwords and they are encrypted by very easy method.
So, here are several suggestions for Telegram&SD users:

• install SD into own folder that differs from standard "%ProgramFiles%\SQLDetective 4.7";
• don't save passwords on DB connecting;
• delete the row from the "Last Connections" list that's saved automatically after successful connection;
• use TNS connection type instead of Direct where Host, Port and SID are available without encryption;
• don't use Host, Port and SID in TNS names;
• monitor your DB by DBA tools: DB Examiner, Top Session Locator, Storage Manager, Session Navigator, DB Monitor;
• check DB settings by object wizards: Profile, User, Role, Schedule, Privileges.

Your Oracle DB may be hacked also after involving the Telegram channel to ClearSQL (CS). Settings of database connections are stored in CS settings in the same way as in SD. CS allows to start SQL*Plus from CS with already connected DB user. Sync feature in CS allows to compile scripts into DB.
So, here are several suggestions for Telegram&CS users:

• install CS into own folder that differs from standard "%ProgramFiles%\ClearSQL 7.0";
• don't save passwords on DB connecting;
• delete the row from the "Last Connections" list that's saved automatically after successful connection;
• use TNS connection type instead of Direct where Host, Port and SID are available without encryption;
• don't use Host, Port and SID in TNS names;
• check the script content before running the Sync actions;
• exclude the "Write Back" option from Project Job and Schedules;
• don't store CS Projects in the default "%AppData%\Roaming\ClearSQL\Data" folder, and don't change the "Preferences / General / Folders / Default project location folder:" option;
• turn off the "Preferences / SQL*Plus / Application Run / Use SQL*Plus executable file in active Oracle Home folder if available" option and create an executable file for SQL*Plus starting by password.