Brian Kelley

Brian Kelley is an author, columnist, and Microsoft SQL Server MVP focusing primarily on SQL Server security. He is a contributing author for How to Cheat at Securing SQL Server 2005 (Syngress), Professional SQL Server 2008 Administration (Wrox), and Introduction to SQL Server (Texas Publishing). Brian currently serves as an infrastructure and security architect. He has also served as a senior Microsoft SQL Server DBA, database architect, developer, and incident response team lead.

Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology

Why an employer should never ask about accessing your Facebook page

by Brian Kelley

Databases – Infrastructure – Security

There's a brilliant piece of work posted as a fictitious resignation letter that gives some scenarios as to why an employer could...

2012-04-03

1,347 reads

Why you can't provide your Facebook credentials

by Brian Kelley

Databases – Infrastructure – Security

I know this isn't related to SQL Server, but it is related to security and privacy.
If an employer or...

2012-04-02

2,388 reads

T-SQL Tuesday #028 - I'm a Jack of All Trades, and Proud of It

by Brian Kelley

Databases – Infrastructure – Security

If I wasn't, would I have proposed the following topic for several speaking chances, including SQLRally?

Being a specialist means you're...

2012-03-13

1,457 reads

SQL Saturday #110 - Tampa - The Dirty Business of Auditing Presentation Materials

by Brian Kelley

Databases – Infrastructure – Security

For those who might want the materials for my presentation at SQL Saturday #110, I've posted them to the site.

SQL...

2012-03-10

1,051 reads

SC Midlands Chapter of ISACA - SQL Server Auditing Course Materials

by Brian Kelley

Databases – Infrastructure – Security

If you attended my SQL Server Auditing course held for the SC Midlands Chapter of ISACA, I finally was able...

2012-03-09

1,331 reads

T-SQL Tuesday #028 - I'm a Jack of All Trades, and Proud of It

by Brian Kelley

Databases – Infrastructure – Security

If I wasn't, would I have proposed the following topic for several speaking chances, including SQLRally?

Being a specialist means you're...

2012-03-06

1,226 reads

Speaking at oPASS on March 8th

by Brian Kelley

Databases – Infrastructure – Security

I will be at oPASS on March 8th (Thursday) in Orlando, Florida. I'll give a preview of the talk I'm giving...

2012-03-01

1,030 reads

New Article: Exploiting SQL Server via CONTROL SERVER permissions

by Brian Kelley

Databases – Infrastructure – Security

I have a new article up at MSSQLTips.com, covering what someone can do with CONTROL SERVER. Most folks know to...

2012-02-27

1,734 reads

Presenting Two Sessions at SQLRally

by Brian Kelley

Databases – Infrastructure – Security

I just received great news that one of my sessions, Attacking SQL Server, was picked by the community for SQLRally....

2012-02-27

979 reads

A Plea: Have your guidance documentation reviewed

by Brian Kelley

Databases – Infrastructure – Security

Today one of my auditors sent me her matrix for auditing Microsoft SQL Server. I had seen part of it...

2012-02-23

1,229 reads

Blogs

2025 Wrapped for Steve

I’ve often done some analysis of my year in different ways. Last year I...

The Book of Redgate: Spread across the world

This was Redgate in 2010, spread across the globe. First the EU/US Here’s Asia...

Merry Christmas

Today is Christmas and while I do not expect anybody to actual be reading...

Read the latest Blogs

Forums

Database security permissions save script

By Srinivas Merugu

Comments posted to this topic are about the item Database security permissions save script

Database backup job steps

I have a SQL Agent job for backing up a set of Analysis Services...

SQL Server 2025 Backup Compression Algorithm

By Johan Bijnens

Comments posted to this topic are about the item SQL Server 2025 Backup Compression...

Visit the forum

Question of the Day

The Large Encoded Value

I want to use the new BASE64_ENCODE() function in SQL Server 2025, but return a string that isn't large type. What is the longest varbinary string I can pass in and still get a varchar(8000) returned?

See possible answers