below86 (2/1/2016)

---

Here is the reason I would NEVER EVER want to be on call for this...

"Certainly hot fixes need to occur, and there are times that you can't wait for a set of changes to be made in development, tested, approved, and then deployed to...

I love the idea of forcing the C-level to actually become acquainted with security. Then again, given the PHB factor I suppose I should be careful what I ask for...

On...

TomThomson (1/21/2016)

---

roger.plowman (1/19/2016)

---

Which is my entire point.

SQL (in most of its variants) makes it stupidly easy to SQL inject. We can control our own code, but what about a third...

Which is my entire point.

SQL (in most of its variants) makes it stupidly easy to SQL inject. We can control our own code, but what about a third party product?...

100 hours? You're off by an order of magnitude.

Assuming you spend a full year working @ 40 hours/week that's 2,080 hours.

It takes *at least* two months (8 weeks or 320...

If it's just the thought of writing 30-40 SPs that gives you pause, you can always write a program that writes the code for you. I did this to create...

TomThomson (1/3/2016)

---

I guess I'm in total disagreement with Roger Plowman.

T-SQL is not the only dialect of SQL that is vulnerable to injection attacks if the application is...

I think I'm going to have to disagree with Steve about SQL injection attacks not being T/SQL's fault.

I mean, T/SQL allows SQL code to have concatenation of statements seperated by...

Ok, as a developer I'm gonna reveal a dirty little secret that NO ONE wants to admit.

Yes, there are best practices in security. Every developer knows (or should know!)...

I disagree with them, you can only get two of the three, depending on the...

barry.mcconnell (12/21/2015)

---

TomThomson (12/21/2015)

---

roger.plowman (12/21/2015)

---

I wish. Good and fast (delivered) isn't cheap, good...

I wish. Good and fast (delivered) isn't cheap, good and cheap isn't...

TomThomson (12/19/2015)

---

jshahan (12/10/2015)

---

I'm in agreement with those that say we are not engineers. However to those that say we should have the same standards or disciplines as those who...

This happened to us. We were running SQL Server on a 16GB TS server (don't ask) and one day SQL Server just pegged the CPU. Impressive, considering this machine has...