Problems displaying this newsletter? View online.
SQL Server Central
Featured Contents
Question of the Day
 
The Voice of the DBA
 

IT Staffer Fired

It might not be ransomware today, but in the age of AI, a similar situation could happen. Read this and share your thoughts. This editorial was originally published on Aug 20, 2019. It is being republished as Steve is on vacation.

In the early 2000s, it seemed that many companies were hit with a rash of virus attacks on their networks. Certainly the SQL Slammer worm affected many of us, and it was a memorable week for me. I returned from vacation to get a call late on Sunday night informing me of issues. I spent a long work working with network people and Microsoft to rid our (shut down) network of the worm, a difficult process with a wide deployment of MSDE instances installed in non-standard locations.

Not long after this, we had another virus invade our network and shut down systems. This was due to a high level manager clicking on an attachment in email, which spread issues to (far too) many others inside the company. Another long night for me patching and cleaning systems, and one where I questioned how someone could be fooled.

In the last year, a similar rash of incidents have spread around various organizations, this time with ransomware instead of viruses. One Florida city government was hit, with an IT worker being at fault for opening a document they received in email. The result? The city paid a ransom and the employee was fired.

Is this fair? I've seen the Twitter mobs and rapid comment trolls condemning and praising both sides. It appears many people rightly think someone clicking on unknown attachments should be fired, while there is no shortage of others that understand that humans get fooled and termination is too harsh.

Personally, I don't know what to think. While most phishing and spam is poorly written, and I often check headers and easily see these notes for what they are. I have seen some very sophisticated and incredibly deceitful emails that might fool most of us.

If you have a privileged account, you better be really careful about opening any attachments from email. You shouldn't download pictures by default except from whitelisted senders, and you might even want to stop doing that. Who knows if your co-worker or business partner got fooled.

It's disconcerting though not unexpected. Perhaps this person was at fault, perhaps it was  mistake. Being fired is never fun, and all of us should be a little worried about this if we're not careful.

Steve Jones - SSC Editor

Join the debate, and respond to today's editorial on the forums

 
 
 Featured Contents
SQLServerCentral Article

Connect an Azure Function to Azure SQL database Using a Managed Identity

Kunal Rathi from SQLServerCentral

In this article, you’ll learn step-by-step setup, Python code implementation, troubleshooting, and best practices to ensure your solution is secure and scalable.

Technical Article

Pros and Cons of Database Sharding for Performance and Maintenance

Additional Articles from SQLServerCentral

Large databases usually have a negative impact on maintenance time, scalability and query performance. For maintenance, these large single databases have to be backed up daily while the amount of actual changing data might be small. For performance, tables without correct indexes result in full table or clustered index scans. As the data grows the total query time increase linearly. How can we decrease downtime for the maintenance window for large databases and optimize the performance of daily queries?

Blog Post

From the SQL Server Central Blogs - How To Deploy Fabric SQL and Azure SQL Databases with Azure DevOps

Jeff Taylor from Jeff Taylor

Fabric has CI/CD built in, but if you've tried to use it for database deployments, you've probably already run into its limits. It's still very much in its infancy....

Blog Post

From the SQL Server Central Blogs - KDA: Echoes of Deception - Case 6

Zikato from StraightforwardSQL

A cryptic message, a book cipher hidden in art provenance records, and a trail of clues leading to the leader of a shadowy cyber organization.

Introduction to PostgreSQL for the data professional

Introduction to PostgreSQL for the data professional

Site Owners from SQLServerCentral

Adoption and use of PostgreSQL is growing all the time. From mom-and-pop shops to large enterprises, more data is being managed by PostgreSQL. In turn, this means that more data professionals need to learn PostgreSQL even when they have experience with other databases. While the documentation around PostgreSQL is detailed and technically rich, finding a simple, clear path to learning what it is, what it does, and how to use it can be challenging. This book seeks to help with that challenge.

 

 Question of the Day

Today's question (by Steve Jones - SSC Editor):

 

SQL Server Certificates

Which of these is not true for certificates used for SQL Server connections?

Think you know the answer? Click here, and find out if you are right.

 

 

 Yesterday's Question of the Day (by Steve Jones - SSC Editor)

BIT_COUNT() III

In SQL Server 2025, I run this code:

select bit_count(-1)

What is returned?

Answer: 32

Explanation: An integer is signed, and shows values from -2,147,483,648 to 2,147,483,647. The value -1 is actuallly 0xFFFF in binary, which is 11111111 11111111 11111111 11111111 in binary. Ref: BIT_COUNT() - https://learn.microsoft.com/en-us/sql/t-sql/functions/bit-count-transact-sql?view=sql-server-ver17

Discuss this question and answer on the forums

 

 

 

Database Pros Who Need Your Help

Here's a few of the new posts today on the forums. To see more, visit the forums.


SQL Server 2019 - Administration
Impact of Single-Threaded PVS Cleanup on ADR in SQL Server 2019 - We want to enable ADR on our SQL Server 2019 instances. I’ve heard that the PVS cleanup process is still single-threaded in SQL Server 2019. Do you have any feedback or experience with this? Is there any noticeable latency, or is it strongly recommended to move to SQL Server 2022 before enabling ADR?
SQL Server 2019 - Development
cons for a dev machine in a different version of sql from our prod server - hi, im not a dba. For a couple of years our dev sql server has been a 2022 vm std instance with varying levels of horsepower depending on how loudly we objected.   For many years our prod , 2019 on prem std.  both have ssas, ssis, ssrs and of course the engine. We are looking […]
Editorials
Forward Deployed Engineers - Comments posted to this topic are about the item Forward Deployed Engineers
SSRS Reminded Me of the Time Microsoft Retired TMG - Comments posted to this topic are about the item SSRS Reminded Me of the Time Microsoft Retired TMG
I Can't Make You Learn - Comments posted to this topic are about the item I Can't Make You Learn
A Quick Second Opinion - Comments posted to this topic are about the item A Quick Second Opinion
Article Discussions by Author
TRY_PARSE vs TRY_CONVERT in SQL Server: From Basics to Practical Usage - Comments posted to this topic are about the item TRY_PARSE vs TRY_CONVERT in SQL Server: From Basics to Practical Usage
DBCC CHECKDB Limits II - Comments posted to this topic are about the item DBCC CHECKDB Limits II
BIT_COUNT II - Comments posted to this topic are about the item BIT_COUNT II
Why Your SQL Permissions Disappeared - Comments posted to this topic are about the item Why Your SQL Permissions Disappeared
Why Your SQL Permissions Disappeared - Comments posted to this topic are about the item Why Your SQL Permissions Disappeared
Five Intelligent Query Processing Features in SQL Server 2022 That Quietly Tune Your Workload - Comments posted to this topic are about the item Five Intelligent Query Processing Features in SQL Server 2022 That Quietly Tune Your Workload
Checking the Error Log I - Comments posted to this topic are about the item Checking the Error Log I
SQL Server 2022 - Administration
Upgrade 2016 Standard to 2022 Express - Title pretty much says it all - can this be done? I've tried several paths and always come up against some failure in the installation process. I can install a new version of 2022 Express, but that means also porting all my logins and roles, as well as restoring every database. I would much prefer […]
SQL Server 2022 - Development
Getting results from a Procedure to join to a query - I have a need to execute a stored procedure and return the results to something I can join to in a query. I am trying to execute a Trial balance from our ERP and get those balances and account numbers to correlate to another table with new account numbers. So my stored procedure execution looks […]
 

 

RSS FeedTwitter

This email has been sent to {email}. To be removed from this list, please click here. If you have any problems leaving the list, please contact the webmaster@sqlservercentral.com. This newsletter was sent to you because you signed up at SQLServerCentral.com.
©2019 Redgate Software Ltd, Newnham House, Cambridge Business Park, Cambridge, CB4 0WZ, United Kingdom. All rights reserved.
webmaster@sqlservercentral.com

 

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -