Switching to Bing
When the announcement for Bing came out, I didn't immediately go over and check it out. As a matter of...
2009-06-08
1,063 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Security Basics: Applying the Principle of Least Privilege Properly
Whenever I do a security presentation, I make sure to cover the Principle of Least Privilege. And when I do I boil it down to this very simple definition: Giving the rights to do the job. No more. No less.
2009-06-04
1,912 reads
Balancing Priorities
This one isn't a technical post, but it's entirely appropriate to those of us in the IT field. Today was a...
2009-06-02
772 reads
Why I Say Something about Running as Administrator
On a couple of recent webcasts, I pointed out the folks were running with the local Administrator account. To start this out, I'm not a big fan of security by obfuscation. Security by obfuscation (not code obfuscation, but security by obscurity, if...
2009-06-02
2,556 reads
Security Basics: Understanding the Surface Area
When it comes to securing a system, it's important to understand how it might be attacked. That's what surface area...
2009-06-01
1,323 reads
Security Basics: Applying the Principle of Least Privilege Properly
Whenever I do a security presentation, I make sure to cover the Principle of Least Privilege. And when I do...
2009-05-29
3,154 reads
Why I Say Something about Running as Administrator
On a couple of recent webcasts, I pointed out the folks were running with the local Administrator account. To start...
2009-05-28
2,157 reads
Catalog view: sys.tcp_endpoints
I was playing around with the endpoint catalog views this afternoon just looking at ways to do poor man's configuration...
2009-05-27
2,823 reads
Speaking at Augusta Developer's Guild
Tomorrow night, May 28th, I'll be speaking the Augusta Developer's Guild. This is a make-up from earlier in the year...
2009-05-27
1,379 reads
SQL Injection - Why I Don't Think Parameterization is Enough
One of the main defenses touted against SQL injection attacks is to use proper parameterization at the application layer. But while this gets most of the cases, there are clearly examples where this alone fails. For instance, consider the stored procedure...
2009-05-20
3,948 reads
Blogs
The Book of Redgate: Spread across the world
By Steve Jones
This was Redgate in 2010, spread across the globe. First the EU/US Here’s Asia...
Merry Christmas
By John
Today is Christmas and while I do not expect anybody to actual be reading...
Self-Hosting a Photo Server the Whole Family Can Use
By Bert Wagner
Until recently, my family's 90,000+ photos have been hidden away in the depths of...
Forums
Happy Holidays, Let's Do Nerdy Stuff
Comments posted to this topic are about the item Happy Holidays, Let's Do Nerdy...
UNISTR Escape
Comments posted to this topic are about the item UNISTR Escape
Celebrating Tomorrow
Comments posted to this topic are about the item Celebrating Tomorrow
Question of the Day
UNISTR Escape
In SQL Server 2025, I run this command:
SELECT UNISTR('*3041*308A*304C\3068 and good night', '*') as "A Classic";
What is returned? (assume the database has an appropriate collation)
A: 
B: 
C: 
See possible answers