Switching to Bing
When the announcement for Bing came out, I didn't immediately go over and check it out. As a matter of...
2009-06-08
1,064 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Security Basics: Applying the Principle of Least Privilege Properly
Whenever I do a security presentation, I make sure to cover the Principle of Least Privilege. And when I do I boil it down to this very simple definition: Giving the rights to do the job. No more. No less.
2009-06-04
1,912 reads
Balancing Priorities
This one isn't a technical post, but it's entirely appropriate to those of us in the IT field. Today was a...
2009-06-02
796 reads
Why I Say Something about Running as Administrator
On a couple of recent webcasts, I pointed out the folks were running with the local Administrator account. To start this out, I'm not a big fan of security by obfuscation. Security by obfuscation (not code obfuscation, but security by obscurity, if...
2009-06-02
2,556 reads
Security Basics: Understanding the Surface Area
When it comes to securing a system, it's important to understand how it might be attacked. That's what surface area...
2009-06-01
1,343 reads
Security Basics: Applying the Principle of Least Privilege Properly
Whenever I do a security presentation, I make sure to cover the Principle of Least Privilege. And when I do...
2009-05-29
3,161 reads
Why I Say Something about Running as Administrator
On a couple of recent webcasts, I pointed out the folks were running with the local Administrator account. To start...
2009-05-28
2,171 reads
Catalog view: sys.tcp_endpoints
I was playing around with the endpoint catalog views this afternoon just looking at ways to do poor man's configuration...
2009-05-27
2,837 reads
Speaking at Augusta Developer's Guild
Tomorrow night, May 28th, I'll be speaking the Augusta Developer's Guild. This is a make-up from earlier in the year...
2009-05-27
1,388 reads
SQL Injection - Why I Don't Think Parameterization is Enough
One of the main defenses touted against SQL injection attacks is to use proper parameterization at the application layer. But while this gets most of the cases, there are clearly examples where this alone fails. For instance, consider the stored procedure...
2009-05-20
3,948 reads
Blogs
T-SQL Tuesday #201 Round-Up: Temp Tables, Friend or Foe?
By ReviewMyDB
The T-SQL Tuesday #201 round-up: nine bloggers on whether temp tables are a friend...
Monday Monitor Tips: Configuring Access to the MCP Server
By Steve Jones
I have been experimenting with MCP servers in a few ways, including the Redgate...
The GO Barrier: Why SSMS Multi-Server Query Waits for the Slowest Connection
By Zikato
I deployed a schema change to 30 servers using multi-server query and deploy-at-low-priority. Small...
Forums
Admin Rights for Everyone
Comments posted to this topic are about the item Admin Rights for Everyone
Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles
Comments posted to this topic are about the item Kerberos Authentication for Aurora PostgreSQL:...
RegEx Functions I
Comments posted to this topic are about the item RegEx Functions I
Question of the Day
RegEx Functions I
Which of these RegEx functions need compatibility level 170 in SQL Server 2025?
See possible answers