Speaking at Augusta Developer's Guild
Tomorrow night, May 28th, I'll be speaking the Augusta Developer's Guild. This is a make-up from earlier in the year...
2009-05-27
1,389 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
SQL Injection - Why I Don't Think Parameterization is Enough
One of the main defenses touted against SQL injection attacks is to use proper parameterization at the application layer. But while this gets most of the cases, there are clearly examples where this alone fails. For instance, consider the stored procedure...
2009-05-20
3,948 reads
Sick? Stay home!
Yesterday I did something I wouldn't have thought of doing a year ago: I stayed home. When I woke up,...
2009-05-19
858 reads
SQL Injection - Why I Don't Think Parameterization is Enough
Note:Since there have been several comments on this, I'm using parameterization at the application layer in the security sense of...
2009-05-15
2,708 reads
Rant: Is It an Effective Control or Not?
This is spurred on by a comment a pen tester made. He was referring to a particular technology and said something to the effect of, "What do you expect? It's 30 year-old technology." I was stunned when the comment was relayed to me. My response...
2009-05-13
2,363 reads
Rant: Is It an Effective Control or Not?
This is spurred on by a comment a pen tester made. He was referring to a particular technology and said...
2009-05-05
1,255 reads
Security Basics: Defense-in-Depth
In my security presentations, another basic I talk about is defense-in-depth. The idea here is to produce multiple layers of protection against a particular attack. For instance, imagine malicious code against your home computer. This is a case where...
2009-05-05
1,971 reads
A Dead Zune and Choices
Shortly after the Zune debuted, I purchased one. And I've been happy with it. It's done everything I expected out...
2009-05-04
868 reads
New Community Resource for IT Pros - Server Fault
Not too long ago the developer community got a fantastic resource called Stack Overflow. It's a question and answer site,...
2009-05-01
1,074 reads
Midlands PASS May Meeting
The Midlands PASS Chapter will be meeting next Thursday night, May 7, at Training Concepts. We have the privilege of welcoming...
2009-04-30
1,415 reads
Blogs
SQL Server Transaction Log Forensics: Preserving Evidence During an Incident
By SQLPals
SQL Server Transaction Log Forensics: Preserving Evidence During an Incident SQL...
What Does It Mean to Make Data AI-Ready?
By James Serra
Making Data AI-Ready, Part 1 (This is the first article in a three-part series...
Using the Data API Builder–VS Live San Diego Resources
By Steve Jones
Thanks for attending my sessions. Resources below: Slides: Using Data API Builder GitHub repo: ...
Forums
Hyperscale Replicas II
Comments posted to this topic are about the item Hyperscale Replicas II
Practical Reporting Queries with CROSS APPLY (Part 3)
Comments posted to this topic are about the item Practical Reporting Queries with CROSS...
Your Favorite Quotes
Comments posted to this topic are about the item Your Favorite Quotes
Question of the Day
Hyperscale Replicas II
How many Azure SQL DB Hyperscale HA replicas can be configured as of Sept 2026?
See possible answers