| A community of more than 1,600,000 database professionals and growing |
| | Security is Getting Serious OK, if we can't trust computer chips, what do we do? It almost feels like the security war to protect information, or at least keep it private, might be lost before our very eyes in the next decade. There's a story about a back door being hidden inside a chip. That's nefarious, and entirely plausable. After all, how many people, forget about the millions that aren't technical, how many people in the world can analyze chip designs for back doors? How many people would have to be corrupted, bribed, threatened, etc to make this happen? It's probably very few. We have enough issues with back doors or flaws in software. We can't even patch, upgrade, or change that quickly. Imagine if computer chips in PCs, routers, wifi cards, really any widely used device had a back door implanted? We would have fundamental security flaws for quite some time. This sounds like a movie plot and I really hope that's the level of reality here. However, as more companies look to spec their own hardware, especially large cloud vendors, this is disconcerting. After all, inside a company there can't be extensive reviews of designs for security flaws. Many companies might outsource the manufacturing of their chips to another company. In that case, could employees of the manufacturer look to embed back doors in chips? I'd hope designs are presented, manudactured, and then discarded quick enough to prevent anyone from engineering a back door into the hardware, but I'm not sure how difficult this is, or how much change would be needed to a design. I suppose there isn't much any of us can do if this possibility is feasible, but we certainly can keep abreast of security issues and perhaps ensure we use a variety of hardware so that any particular issue doesn't affect our entire infrastructure. Steve Jones from SQLServerCentral.comJoin the debate, and respond to today's editorial on the forums |
| The Voice of the DBA Podcast Listen to the MP3 Audio ( 3.8MB) podcast or subscribe to the feed at iTunes and Mevio . The Voice of the DBA podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com. | |
|
|
| ADVERTISEMENT | | Free SSMS add-in: SQL Search Redgate SQL Search is a free SSMS add-in that lets you find fragments of SQL across multiple objects and multiple databases. Once installed, SQL Search appears on the SSMS toolbar, allowing you to quickly navigate to objects wherever they are on a server. Download SQL Search now. |
| | How to track every change to your SQL Server database See who’s changing your database, alongside affected objects, date, time, and reason for the change with SQL Source Control. Get a full change history in your source control system. Learn more. |
| | SQL Toolbelt – everything you need to work with SQL Server Redgate’s SQL Toolbelt contains the industry-standard tools you need to make you and your team more productive, to protect your data and manage performance, and to include your database in agile processes. Find out more and download your free trial. |
|
|
|
| | | John F. Tamburo from SQLServerCentral.com With AD Authentication via groups, SQL Server is vulnerable to orphaned Windows users' logins being added to SQL Server at a later date. This article gives an improved user audit script that detects orphaned DB Users and also a delete script. More » |
| Additional Articles from Redgate Over recent months, Redgate’s development teams have been busy updating the tools in the SQL Toolbelt to support the valuable new functionality released with SQL Server 2016. To achieve this, most tools now support the syntax for SQL Server 2016’s key features, letting you do even more with them. Learn mor. More » |
| Additional Articles from MSSQLTips.com You work in a shop that puts business or application logic in SQL Server using stored procedures, views and functions to return values to the calling applications or perform tasks. This is not unusual for companies that use the SQL Server layer to perform More » |
|
|
| | Today's Question (by Steve Jones): I want to replicate data from a publisher to a subscriber in SQL Server 2016. Where can I use memory optimized tables? |
Think you know the answer? Click here, and find out if you are right. We keep track of your score to give you bragging rights against your peers. This question is worth 1 point in this category: Replication. We'd love to give you credit for your own question and answer. To submit a QOTD, simply log in to the Contribution Center. |
|
|
| |
ADVERTISEMENT | Securing SQL Server - Written by Denny Cherry, a Microsoft MVP for the SQL Server product, a Microsoft Certified Master for SQL Server 2008, and one of the biggest names in SQL Server today, Securing SQL Server, Second Edition explores the potential attack vectors someone can use to break into your SQL Server database as well as how to protect your database from these attacks. In this book, you will learn how to properly secure your database from both internal and external threats using best practices and specific tricks the author uses in his role as an independent consultant while working on some of the largest and most complex SQL Server installations in the world. This edition includes new chapters on Analysis Services, Reporting Services, and Storage Area Network Security. Get your copy from Amazon today. | |
|
|
|
|
|
|
| Yesterday's Question of the Day |
| |
| | Jignesh Raiyani from SQLServerCentral.com Logreader agent will insert error into distribution..MSrepl_errors. we can set this procedure into Monitor. which will call this sp for every five minute. when result set : 0 then Normal, when 1 Then error found in replication. once record inserted in DBA_Replication_Error_Log then Alert will displayed in monitor and we need to truncate DBA_Replication_Error_Log table. More » |
|
|
| Database Pros Who Need Your Help |
| Here's a few of the new posts today on the forums. To see more, visit the forums. SQL 2012 to 2016 - Possible Application Issues - In upgrading from SQL Server 2012 to 2016, based on your experience, what are possible impacts the upgrade could have... BCP Copy - I am copying contents of 2 csv files to at third one. It works with this command: exec master..xp_cmdshell 'copy /b "c:\shared\header.csv"... Device not exist\Corruption? - Hi, Got the below error in Windows log The systemfailedtoflushdatatothetransactionlog.CorruptionmayoccurinVolumeId:Q:,DeviceName: \Device\HarddiskVolume108. ( Adevicewhichdoesnotexistwasspecified.) Allocation and Consistency Errors - Hi all! I am not a DBA per se, but I do have enough experience with SQL to get assigned... Property TextHeader is not available - Hi, When I tried to get the SP script, I got the error "Property TextHeader is not available for StoredProcedure 'xxxxx'.... Full text index not updating - I am having an issue with a full-text index. I am not very familiar with indexes so please forgive me... SSIS Error Handling - I'm new to SSIS so this may seem like a very elementary question. I have a real simple process that imports... t-sql 2012 query issue - In a t-sql 2012 table, I have a table that contains the following table definition: CREATE TABLE [dbo].[TranscriptCourse]( [transcriptID] [int] IDENTITY(1,1) NOT... t-sql 2012 want 'NOT in' or 'NOT EXISTS' to work - In t-sql 2012, I have the following sql: declare @gradYear int = 2017 SELECT distinct graduation.personID into #gradPersonID FROM [TEST].[dbo].[Graduation] graduation where... count(null) - I was reading [url=http://www.sqlservercentral.com/articles/T-SQL/142568/]this article[/url], and I was surprised to note that [font="Courier New"]select count(convert(int,null))[/font] returns 0 while [font="Courier New"]select... XML data to columns - I am really struggling with some xml data in a column, and how to split it into multiple columns. Right... C-h-e-a-p K-i-t-c-h-e-n U-n-i-t-s For S-a-l-e Online Halton Uk - Cheap Kitchen Units For Sale Online Halton Uk . Go to www.cheapkitchens.uk.com using an automated cutter - [url=https://www.linkedin.com/pulse/binary-brain-trust-review-found-trading-software-system-f-m-sarwar]Binary Brain Trust Review[/url] Running Remaining Balance or Running Subtraction - Partition By Account - [font="Arial"]Hi , [b]***USING SQL SERVER 2008 R2****[/b] I have used CTE to get to this partial result where I'm partitioning by column... How do I create a new database using Backup? - I'm trying, once again, to get my database into Azure. I've gone through the process of creating a new logical... Reverse string without built in functions - Hello all. I am trying to write a function which reverses passed string WITHOUT using any built-in functions So if 'abc' is... SSAS Tabular with CAWA - Has anyone use CAWA plus scripts to automate processing of SSAS Tabular tables? How does that worK? subqurey omits too records from table trvchar ---can any one help to join - -------Querry SELECT 5.0 AS NoOfCopy, BaseTbl.*, PartyMst.Party_Name, PartyMst.Party_Add1, PartyMst.Party_Add2, PartyMst.Party_Add3,PartyMst.Party_City, PartyMst.Party_Pin, PartyMst.Party_Cont, PartyMst.Party_Tel, PartyMst.Mobile_No, PartyMst.Party_CST, PartyMst.Party_LST, PartyMst.CST_Date, PartyMst.LST_Date, PartyMst.Party_Coun, PartyMst.Party_CST as PParty_CST,... The merge process could not initialize the subscription - I have inherited an existing replication setup and I need to add a new publication to replicate. I'm fairly new to... Logical Reads - when i execute my main sp , inner sp showing read count as 6000 ,but when execute that perticular sp its... |
|
| This email has been sent to [email protected]. To be removed from this list, please click here. If you have any problems leaving the list, please contact the [email protected]. | This newsletter was sent to you because you signed up at SQLServerCentral.com. Feel free to forward this to any colleagues that you think might be interested. If you have received this email from a colleague, you can register to receive it here. | This transmission is ©2015 Redgate Software Ltd, Newnham House, Cambridge Business Park, Cambridge, CB4 0WZ, United Kingdom. All rights reserved. Contact: [email protected] |
|
|