Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Who's Got Your Data?


Who's Got Your Data?

Author
Message
Steve Jones
Steve Jones
SSC-Dedicated
SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)

Group: Administrators
Points: 36070 Visits: 18736
David Benoit (7/3/2013)
...

Somehow we need to get to the place where we are able to master data access in such a way that people, by job definition, only get to see the data that they truly need, and yet all jobs functions are able to work flawlessly without being constrained by those same restrictions. Utopia? Maybe.


I think it is Utopia, mostly because of the overhead of trying to classify data. too often I think we don't know, or don't have the time to spend doing this. How many people actually set up 3-4 roles in a database, and limit the access? Few do, often because we can't easily classify data or entities for a job, and often because as applications evolve, we need to give access to new tables, or portions of tables.

Follow me on Twitter: @way0utwest
Forum Etiquette: How to post data/code on a forum to get the best help
My Blog: www.voiceofthedba.com
Brandon Forest
Brandon Forest
SSC Journeyman
SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)SSC Journeyman (87 reputation)

Group: General Forum Members
Points: 87 Visits: 446
Steve,

Yep, that about sums it up. I've known since Oli North was busted by emails he thought he deleted that anything that is ever online for a single moment can potentially be saved and viewed by others without my knowledge. I am ambivalent about this state of reality. On the one hand, I'm trying hard to blend in with the heard, and hope that the lions stalking us choose someone else to eat for lunch. On the other hand, I try to reduce my electronic footprint whenever possible by: 1) Never signing up for "Club Cards" whenever I have a choice in the matter; 2) I never cache my passwords when signing in to internet sites; 3) I never allow my financial information to be cached; 4) I use a low limit ATM card that I keep < $200 in, for all online purchases; 5) I use Paypal, which uses the same low-limit card, whenever possible to pay for things on the internet; 6) I have a credit-watch service to monitor unusual activity, or who is requesting a credit check on me; 7) I always consider what I'm posting on the internet, with the mantra "would I be OK saying this in a court of law?"; 8) I will identify myself explicitly when I deem it beneficial to me, otherwise I try to anonymize my presence in forums and online whenever possible; 9) I expect that Big Brother (NSA) is monitoring everything I say and write, but I trust my government to do the right thing... most of the time.

Cheers!

Banyardi Schmardi
Steve Koch
Steve Koch
Forum Newbie
Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)Forum Newbie (8 reputation)

Group: General Forum Members
Points: 8 Visits: 59
Do you also post Federal, State, Regional, and Local government's, political parties', union organizations' and other NGO's data breaches as well as businesses or individuals?
Howard Perry
Howard Perry
SSC Veteran
SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)SSC Veteran (207 reputation)

Group: General Forum Members
Points: 207 Visits: 514
Thanks for raising the issue, Steve.

It's something that needs to be kept in the public eye.

Data generation /creation is inevitable and so is capture. This reply is being captured somewhere.

The crux of the matter is what is being done or going to be done with the data.

The worst mistake of governments and corporations is to deny or force others to deny they are collecting it. They have to be open about what they do with it and also afford individuals the opportunity to access personal data held and check its integrity.

Movies like Enemy of the State show how data collected about a person can be misused by governments in the name of protecting all of us.

Disfunctional legislatures compound the problem, because there is nobody there to protect the citizenry.

They have to stop saying "Trust us. We know what's best for you". That doesn't cut it any more.
swwg69
swwg69
Grasshopper
Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)Grasshopper (16 reputation)

Group: General Forum Members
Points: 16 Visits: 35
As a father with daughters, I worry about the indiscriminate abuse by single FBI agents. Let me cross reference birth control pills with condom purchases and bar patronage. Where is that cell phone at this Friday night?
How about you take short cut to work through a bad part of town.
You then have to answer questions about your boss, but are asked how your
wife would feel about you checking out hookers every night?
Or my favorite from the UK. Kids who get mad at teachers, take a photo of the
teacher's license plate; print it; rent a car like the teacher's and put the photo
over the rental's plate. Then run through the red light cameras near the school and the teacher's home.
Too much data. No way to control it.
Happy 4th!
Steve Jones
Steve Jones
SSC-Dedicated
SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)SSC-Dedicated (36K reputation)

Group: Administrators
Points: 36070 Visits: 18736
swwg69 (7/4/2013)
As a father with daughters, I worry about the indiscriminate abuse by single FBI agents. Let me cross reference birth control pills with condom purchases and bar patronage. Where is that cell phone at this Friday night?
How about you take short cut to work through a bad part of town.
You then have to answer questions about your boss, but are asked how your
wife would feel about you checking out hookers every night?
Or my favorite from the UK. Kids who get mad at teachers, take a photo of the
teacher's license plate; print it; rent a car like the teacher's and put the photo
over the rental's plate. Then run through the red light cameras near the school and the teacher's home.
Too much data. No way to control it.
Happy 4th!


I worry less about taking responsibility for things I (or you) did, but few know about. That is a problem, but abuse by someone that takes advantage of knowledge, for the purpose of attacking/blackmailing/etc. is an issue.

There have been reports of interns seeing this data, contractors, etc. Those may or may not be people to worry about, but we certainly shouldn't be taking chances. We should be tracking who has access, when, and ensure there are consequences or mining of the miners' actions as well.

Follow me on Twitter: @way0utwest
Forum Etiquette: How to post data/code on a forum to get the best help
My Blog: www.voiceofthedba.com
Miles Neale
Miles Neale
SSCrazy
SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)

Group: General Forum Members
Points: 2666 Visits: 1694
For years many have said that "if all your actions are legal and ethically clear you have nothing to hide." Well those days are past. You may not be convicted of anything and the law may see you as clean, but there are other eyes looking into that data that are not legally or morally correct. Thieves and rascals are out for all they can pilfer and they will hit any target that is not protected.

It no longer is an issue of me not doing anything wrong and having nothing to hide. The issue is I want others to know only those things I want them to know to protect my privacy and life. I want some expectation of privacy to exist with no unauthorized collection of data about me and mine.

Years back we found out that by tagging members of a herd we could track migratory behaviors of elephants, tigers, snow leopards and others. That information was vital in the correction of human practices to protect some very delicate populations of endangered species. But once we had that technology in place we wanted to use it for other things. Scientists because that can are tracking the patterns of the human species and their behaviors without their permission using their cell phones and other devices as the in. Then through sloppy data protections they are "sharing" that data through cracks and lax protections. Or some are simply selling it.

You are right, this is frightening.

M...

Not all gray hairs are Dinosaurs!
jay-h
jay-h
SSC Eights!
SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)SSC Eights! (919 reputation)

Group: General Forum Members
Points: 919 Visits: 2222
Miles Neale (7/9/2013)
Fo...
It no longer is an issue of me not doing anything wrong and having nothing to hide. The issue is I want others to know only those things I want them to know to protect my privacy and life. I want some expectation of privacy to exist with no unauthorized collection of data about me and mine.

...



You are so right about it not just being about doing something wrong. The internet has quite a memory and you don't know who is accessing it. Perhaps you may pontificate perfectly legally on controversial subjects that interest you, religion, politics, gun policy, abortion, whatever. And down the road, you're applying for an apartment, or a job and someone finds something they don't like. Or perhaps you're involved in a legal issue like a civil suit and a lawyer finds something to leverage your credibility. (Look how an inappropriate remark from 25 years ago has returned to haunt a celebrity)

...

-- FORTRAN manual for Xerox Computers --
GoofyGuy
GoofyGuy
SSC-Addicted
SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)SSC-Addicted (409 reputation)

Group: General Forum Members
Points: 409 Visits: 971
Perhaps you may pontificate perfectly legally on controversial subjects that interest you, religion, politics, gun policy, abortion, whatever. And down the road, you're applying for an apartment, or a job and someone finds something they don't like.

Hence the need for aliases. Odd, how the Internet, which was supposed to advance the free flow of information, is also making its users schizophrenic.
Miles Neale
Miles Neale
SSCrazy
SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)SSCrazy (2.7K reputation)

Group: General Forum Members
Points: 2666 Visits: 1694
jay-h (7/9/2013)
Miles Neale (7/9/2013)
Fo...
It no longer is an issue of me not doing anything wrong and having nothing to hide. The issue is I want others to know only those things I want them to know to protect my privacy and life. I want some expectation of privacy to exist with no unauthorized collection of data about me and mine.

...



You are so right about it not just being about doing something wrong. The internet has quite a memory and you don't know who is accessing it. Perhaps you may pontificate perfectly legally on controversial subjects that interest you, religion, politics, gun policy, abortion, whatever. And down the road, you're applying for an apartment, or a job and someone finds something they don't like. Or perhaps you're involved in a legal issue like a civil suit and a lawyer finds something to leverage your credibility. (Look how an inappropriate remark from 25 years ago has returned to haunt a celebrity)


Thanks jay.

To take what you have said one step further if I could, it does not even have to be a controversial subject. You could take a stand on some method of building a SQL View of a complex collection of data from various joined tables and the indexing of that view that is proven to work great in the reading of the view but takes a long time to build in a bach process every evening. And since you are all for rapid access and see the justification for the large batch window to build that structure you are labeled as one who wastes computer time and resources. Then when you defend yourself you are called argumentative and a rebel.

It can get worse while all the time you are trying to make it better.

Not all gray hairs are Dinosaurs!
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search