security

SQLServerCentral Article

Can We Please Stop Sending Passwords Over the Wire?

  • Article

While analyzing SQL Server's network protocol, I came across a weird fact: when a database client logs in using SQL Server authentication (as opposed to Windows authentication), it has to send the user's password to the server, in blatant violation of common security guidelines. At first, I couldn't believe it; SQL Server generally does an […]

(8)

You rated this post out of 5. Change rating

2022-03-02

5,662 reads

SQLServerCentral Article

Query control made easy

  • Article

Overview As we all know, data security is a never-ending battle. Every day, we hear of new data breaches. It's a hard problem, and there is no single solution, other than a defense in depth. Let's look at one of those defenses for databases: query control. Query control is a simple idea: most applications access […]

(4)

You rated this post out of 5. Change rating

2022-01-07

4,055 reads

SQLServerCentral Article

SQL Server Data Classification Comes Alive

  • Article

Overview Microsoft SQL Server 2012 introduced a feature called data classification, which allows you to mark certain columns with labels, indicating that these columns contain sensitive or special-handling data. For instance, you may want to mark a column containing credit card numbers as "confidential", or sales numbers as "management only". The problem is that you […]

(1)

You rated this post out of 5. Change rating

2021-12-10

5,358 reads

SQLServerCentral Article

SQL Server Data Masking: a comparison with Gallium Data

  • Article

Introduction In SQL Server 2016, Microsoft introduced a new feature called dynamic data masking, which allows you to mask the values of certain columns and keep that data hidden from certain users, without having to modify your applications. Let's take a look at how SQL Server does data masking, and compare it to the way Gallium Data […]

You rated this post out of 5. Change rating

2021-12-03

2,019 reads

Blogs

T-SQL Tuesday #201 Round-Up: Temp Tables, Friend or Foe?

By

The T-SQL Tuesday #201 round-up: nine bloggers on whether temp tables are a friend...

Monday Monitor Tips: Configuring Access to the MCP Server

By

I have been experimenting with MCP servers in a few ways, including the Redgate...

The GO Barrier: Why SSMS Multi-Server Query Waits for the Slowest Connection

By

I deployed a schema change to 30 servers using multi-server query and deploy-at-low-priority. Small...

Read the latest Blogs

Forums

Admin Rights for Everyone

By Steve Jones - SSC Editor

Comments posted to this topic are about the item Admin Rights for Everyone

Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles

By Arvind Toorpu

Comments posted to this topic are about the item Kerberos Authentication for Aurora PostgreSQL:...

RegEx Functions I

By Steve Jones - SSC Editor

Comments posted to this topic are about the item RegEx Functions I

Visit the forum

Question of the Day

RegEx Functions I

Which of these RegEx functions need compatibility level 170 in SQL Server 2025?

See possible answers