Admin Rights for Everyone
Steve thinks administrator rights for too many people is a bad idea, but even when it's a limited group, he recommends some sort of governance.
2026-08-26
180 reads
Security
Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles
Learn how you can enable map your security roles in Aurora PostgreSQL to AD groups using Kerberos.
2026-08-26
1,017 reads
The “Successful Login” Dilemma: Why Your Login Auditing Strategy Might Be Hurting Your Server
From bloated error logs to risky logon triggers, a guide to auditing connections without killing performance.
2026-07-29
2,253 reads
A Security and AI Fail
Security is an important consideration for anyone working with data, but it's especially a concern with AI.
2026-07-15
152 reads
The New Wave of Security Threats
New AI tools are discovering older vulnerabilities in software, as well as new ones. Get ready for a bunch of patches to come out.
2026-05-09
149 reads
Securing Your Databases in 2026: Best Practices for the Evolving Threat Landscape
In 2026, your approach to both applications and databases must be focused on practical and technical real-world operations and use cases rather than just hype.
2026-02-16
Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks
This article reveals a critical SQL Server flaw: attackers can weaponize Date Correlation Optimization (DCO) views in restored backups
2026-02-13
No Defaults Passwords Ever
Steve doesn't see a reason why we should have default passwords on systems ever.
2026-01-17
103 reads
Minimally Viable Security
Today Steve talks about the need for a basic level of security in our software.
2026-01-05
103 reads
SQL Server DBaaS Vulnerability: Decrypting System Code & Exfiltrating User Data
Security in cloud environments is both challenging and fascinating, particularly for Database-as-a-Service (DBaaS) offerings like Amazon RDS, GCP CloudSQL and Alibaba ApsaraDB RDS. The cloud vendor acts as the system administrator, managing the operating system, patching, and backups, while the user manages their data and databases.
2025-12-03
Blogs
A New Word: Gnossienne
By Steve Jones
gnossienne– n. the awareness that someone you’ve known for years still has a private...
Exploring DiskANN: Part I: Understanding the Algorithm before the disk
How I used AI for this postChatGPT to generate images based on info specifically...
Learning Tool – Deepstash
By Brian Kelley
A few months ago I started using Deepstash. Deepstash breaks books into the key...
Forums
When the Token Meter is Zero
Comments posted to this topic are about the item When the Token Meter is...
Understanding Temp Tables and Table Variables in SQL Server
Comments posted to this topic are about the item Understanding Temp Tables and Table...
The Data API Builder MCP Server Tools
Comments posted to this topic are about the item The Data API Builder MCP...
Question of the Day
The Data API Builder MCP Server Tools
The Data API Builder MCP Server, v2.x, includes a number of tools. What actions can these tools perform in your database?
See possible answers