Don’t trust the locals: investigating the prevalence of persistent client-side cross-site scripting in the wild

Does your web application make use of local storage? If so, then like many developers you may well be making the assumption that when you read from local storage,...

Serious flaws leave WPA3 vulnerable to hacks that steal Wi-Fi passwords

Next-gen standard was supposed to make password cracking a thing of the past. It won't.

TajMahal Spyware

Kaspersky has released details about a sophisticated nation-state spyware it calls TajMahal: The TajMahal framework's 80 modules, Shulmin says, comprise not only the typical keylogging and screengrabbing features of...

Testing as another user–#SQLNewBlogger

Another post for me that is simple and hopefully serves as an example for people trying to get blogging as #SQLNewBloggers. This is one of those things I do...
The...

How the Anonymous Artist Bansky Authenticates His or Her Work

Interesting scheme: It all starts off with a fairly bog standard gallery style certificate. Details of the work, the authenticating agency, a bit of embossing and a large impressive...

Hey Secret Service: Don't Plug Suspect USB Sticks into Random Computers

I just noticed this bit from the incredibly weird story of the Chinese woman arrested at Mar-a-Lago: Secret Service agent Samuel Ivanovich, who interviewed Zhang on the day of...

Creating My Table

Airbnb guest found hidden surveillance camera by scanning Wi-Fi network

Airbnb initially didn't ban offender despite rule against undisclosed cameras.

Workplace Encounter: Effects of TLS 1.2

In this article we share a recent experience we had with implementing TLS 1.2 ONLY support on our databases and particularly with respect to its effect on Transaction Log Shipping sessions.

Review Minimum SQL Server Security Practices

In this tip we look at different things you should consider when developing your database systems to ensure you are also thinking about security best practices as well.