Where I work now, most instances are virtualized and that's the default configuration for all new instances, so we can scale them up if needed. What that means is that...

pietlinden (4/30/2016)

---

LOL...

<insert TERRIBLE advice here> ... and don't forget to ascribe to someone who actually knows what he's talking about.

Sorry, couldn't resist!

The question reminded me of some "documentation" of a...

Yes, you can prevent the web application from interrogating employee SSNs by implementing role based security and abstracting the application from the employee table(s) by using stored proceure(s). Ideally, you...

If you really want, you can also model an entire database containing objects with only spaces for names.

create database [ ];

GO

use [ ];

GO

create schema [ ];

GO

create table [...

Jeff Moden (4/28/2016)

---

Apologies. I'm not going to get to this tonight or tomorrow. I'm in the middle of a server migration and I need to sanitize the code...

Sergiy (4/28/2016)

---

http://opendata.stackexchange.com/questions/5595/how-should-us-ssn-be-anonimized

Since SSN has only 9 digits, changing hash function will not suffice because attacker can simply apply the function to all 10^9 SSN's and match the result against the...

You don't want indexes on a table that arn't being used (don't benefit queries or insure uniqueness), because they require I/O to maintain whenever the table is inserted, updated, or...

Implementing a Data Warehouse with Microsoft SQL Server 2012/2014

https://www.microsoft.com/en-us/learning/exam-70-463.aspx

A table lock (TABLOCK) will improve the performance of a bulk table insert, but it will also hold a lock on the entire table. If you can tolerate somewhat longer...

I'm assuming what you want to do is roll your own Change Data Capture, where you are capturing only those columns that changed within a row, and then insert into...

If all the organization's databases and backups are encrypted, then a far more realistic scenario (although still improbable) is that an insider figures out a way to somehow copy and...

Steve Jones - SSC Editor (4/27/2016)

---

splitting hairs.

Losing the salt would be the equivalent of losing the symmetric key, if the domain is known. In the case of a social security...

The "Right To Be Forgotten" is an interesting legal concept. Not only is it technically and logistically impossible, but apparently it doesn't apply equally to all individuals (ie: regular folks...

GilaMonster (4/27/2016)

---

I disagree. If you're using symmetric encryption and the key is compromised,...

Steve Jones - SSC Editor (4/27/2016)

---

Eric M Russell (4/26/2016)

---

Post the SHA2_256 hash of any validly formatted plaintext SSN (ie: any code conforming to 999-99-9999), and I'll reply back with the...