There is an active attack in the wild for the newly announced Adobe Acrobat and Adobe Reader vulnerability. While the...

2009-02-20

2,069 reads

You Must Trust Someone

by Brian Kelley

Databases – Infrastructure – Security

After some recent talks with security folks and auditors, one of the things I have had a hard time getting across...

2009-02-20

3,099 reads

The Limited Usefulness of Encrypting File System (EFS) and Transparent Data Encryption (TDE)

by Brian Kelley

Databases – Infrastructure – Security

This is something that hit me as I was presenting to the Charlotte SQL Server User Group last night.
Back...

2009-02-18

4,095 reads

Another Reason to Avoid Cross-Database Ownership Chaining

by Brian Kelley

Databases – Infrastructure – Security

This past weekend we were moving database files around because we added new LUNs to an existing production cluster. We...

2009-02-13

2,163 reads

Counterpoint: Against Specialization

by Brian Kelley

Databases – Infrastructure – Security

Brent Ozar wrote his Things you know now and in it he says this under his first point, Pick one...

2009-02-11

2,235 reads

New Security Bulletin for SQL Server 2000/2005 (MS09-004)

by Brian Kelley

Databases – Infrastructure – Security

Affected Versions:
SQL Server 2000 SP4SQL Server 2005 SP2Unaffected Versions:
SQL Server 2005 SP3 SQL Server 2008Original Vulnerability Report:http://www.securityfocus.com/archive/1/archive/1/499042/100/0/threaded
Microsoft Security Bulletin Link:http://www.microsoft.com/technet/security/bulletin/ms09-004.mspx
Brief Analysis:
The...

2009-02-11

896 reads