One of the main defenses touted against SQL injection attacks is to use proper parameterization at the application layer. But while this gets most of the cases, there are clearly examples where this alone fails. For instance, consider the stored procedure...
2009-05-20
3,948 reads
Question: What mechanism allows SQL Server 2008 to commit transactions on the mirror faster than SQL Server 2005? This question was asked on a technical discussion group. My reply follows.
2009-05-19
3,115 reads
OK….so I’m in the middle of a very interesting Effective Dating project…basically we’re dealing with some tables that only store current data, but there is a need for future-dated data as well. Because the base table can’t hold that data...
2009-05-18
3,057 reads
Most of us are tired of this overused, vague term. How many of you have clicked on a 'DBA' job posting only to find that it's not what you do? Or asked for a DBA resume from a recruiter and gotten something other than what you expected? Or...
2009-05-14
1,999 reads
While perusing some of the threads on SQLServerCentral.com one of the questions that hit me was regarding the use of scalar functions in queries. In this particular case, in the column list of a SELECT statement. Did it make sense to encapsulate a routine...
2009-05-12
1,958 reads
As I've mentioned in earlier posts (Part 1, Part 2, Part 3) I've engaged speaking and networking Don Gabor to help me build my skills. I recently had my second coaching session and wanted to share more of what I've learned so far.
2009-05-11
1,479 reads
I've been tech editing an encryption book for SQL Server. It's long overdue, and I think it will be a nice addition to any DBA's library. It also addresses a complicated subject that Books Online has inadequately covered. In fact, they've...
2009-05-08
2,065 reads
If you own a business, I believe that you have a right to make more money than the rest of your employees. You are taking on a risk, and greater risk should result in greater reward, at least that’s how capitalism is supposed to work. But what about management...
2009-05-06
1,969 reads
In my security presentations, another basic I talk about is defense-in-depth. The idea here is to produce multiple layers of protection against a particular attack. For instance, imagine malicious code against your home computer. This is a case where...
2009-05-05
1,971 reads
I've written quite a few posts lately on networking and a very common question is - where's the results? What do I get out of all the effort, and so far my best (if lame) answer is that networking is an investment based on faith that...
2009-04-30
1,511 reads
By Steve Jones
I coach volleyball and I do a lot of stat stuff on paper. I...
By Steve Jones
dolorblindness – n. the frustration that you’ll never be able to understand another person’s...
By Steve Jones
I had a customer ask about analyzing their Test Data Manager (TDM) usage to...
Is there a good syllabus for reading these two together? (Yes, it's called the...
Comments posted to this topic are about the item GPX distance and time analysis...
Comments posted to this topic are about the item The DBA is Dead; Long...
In SQL Server 2025, if I want to remove an IP from a listener, what do I do?
See possible answers