Steve Jones thinks Microsoft is making a fundamental security mistake in the way they build features for the various editions of SQL Server. Read today's editorial and see if you agree.  Read more...

We aren't necessarily liable for data breaches at our company, but will that last forever? Steve Jones talks about some things that you might want implement to ensure that you aren't liable if there ever is a security issue.  Read more...

Would you like to have only SQL Server Authentication on your instances? That's the subject of this Friday's poll.  Read more...

An open letter asks Google to change their default protocol to be more secure. Are there things that we might want to do inside SQL Server to make it more secure by default? Any low hanging fruit that would help the platform?  Read more...

Are IT administrators focusing on the wrong attacks when securing their systems? Should we as DBAs and developers care? Steve Jones argues that we want to be aware of these issues.  Read more...

Do we take security too far? Are we creating unnecessary rules for those that need to use the resources we support? Steve Jones talks today about security and how we might want to approach it when handling rights for developers.  Read more...

Working with passwords that provide enough security and are hard to crack is complicated enough. Most users want to simplify their lives with fewer passwords if possible. This Friday Steve Jones asks how you handle passwords across systems.  Read more...

There was a vulnerability announced in the SQL Server password system last week, but Steve Jones doesn't see this as much of an issue. Read his thoughts and see if you agree.  Read more...

Perhaps we need to protect more data, according to Steve Jones. With the ability to identify most people with 10 digits of information, Steve Jones asks you to really think about what you need to store.  Read more...

This Friday's poll looks at security and password changes. What interval do you think is appropriate and why? Steve Jones asks and gives you a few thoughts on his own experiences.  Read more...

SQL Server doesn't support two factor authentication, but Steve Jones thinks it might be a good idea. Perhaps it's something that will get implemented in the next version, and might even serve to better secure the platform.  Read more...

Many businesses have loyalty programs to encourage repeat business. However do they think about data security when they build these programs? Steve Jones thinks they could do better.  Read more...

What's your stolen data worth? It might be worth investigating, as Steve Jones suggests. Then you'll know how much you should be spending to protect it.  Read more...

What problems occur because of the algorithm chosen to generate data? A new report says that social security numbers in the US can be predicted. Steve Jones has a few warnings about what algoriothms you choose.  Read more...

A report says that most of the data lost in corporations is from employees. What can be done about it? Steve Jones thinks we still have work to do in this area.  Read more...

A common request is how can you secure SQL Server data and prevent the system administrator from viewing data. Steve Jones talks a little about the issue and how you can handle it.  Read more...

Most companies in a recent survey expect to get hacked this year. Steve Jones wishes that the technological leaders would help everyone develop more secure code by publishing more information.  Read more...

What happens to the data of a company if it goes out of business? Steve Jones has a little experience and says it might not be as simple as you think.  Read more...

How do you protect and monitor your databases? Auditing is one way, but Steve Jones thinks this subsystem in SQL Server needs to mature.  Read more...

Having employees leave your company is a reality of life. But how do you handle letting your IT workers go and protect your systems? Steve Jones isn't sure there is much you can do to prevent issues, but you can deal with them.  Read more...