K. Brian Kelley - Databases, Infrastructure, and Security

IT Security, MySQL, Perl, SQL Server, and Windows technologies.

Syndication

News

Links

Browse by Tags

All Tags » SQL Server 2000 (RSS)
Avoid Domain Admin level accounts for SQL Server
Every so often I see a post in the forums where someone has stated they've used a Domain Admin level account to run the SQL Server service. The implications are that anyone who is a member of the sysadmin fixed server role is effectively a domain...

Posted 12 June 2008 19:30 by bkelley | with no comments

Setting Static Ports when dealing with Named Instances and Kerberos
I ran across this a week or so ago. There were a couple of SQL Servers running named instances that we wanted to setup Kerberos authentication against (in the event we would use Kerberos delegation). Here is how the ports were set according to SQL Server...

Posted 17 May 2008 11:58 by bkelley | with no comments

Thoughts on SQL Saturday in Jacksonville
I was able this Saturday to head down to Jacksonville and speak at the SQL Saturday there. There were a lot of folks, a lot of good presentations, and the area in and around Jacksonville was gorgeous. I gave two presentations, both of them security related...

Posted 07 May 2008 11:38 by bkelley | 1 comment(s)

Jacksonville SQLSaturday less than a month away!
The SQLSaturday in Jacksonville, Florida, will be held May 3, 2008. I'm on track now to give two security based presentations: Protecting Your SQL Server From Treasure Seekers : This presentation is geared for system administrators, DBAs, and developers...

Posted 05 April 2008 03:42 by bkelley | with no comments

New SQL Server book on Disaster Recovery
James Luetkehoelter has announced his book on SQL Server Disaster Recovery is complete. It is published by aPress and due out in March, according to the aPress site. Information here: James Luetkehoelter: Finally...finished....book... aPress.com: Pro...

Posted 04 February 2008 20:56 by bkelley | 2 comment(s)

Why Participating in a Community is Important and Beneficial
Back in 2000 I began writing for swynk.com in hopes of learning more about SQL Server and beginning to make a name for myself in the SQL Server community. That was a little over seven years ago. As SQLServerCentral.com came online, I transitioned to it...

Posted 03 January 2008 15:07 by bkelley | 2 comment(s)

Tribute to Honor Jim Gray
Saw this on the Association for Computer Machinery SIGMOD announcements. Tribute to Honor Jim Gray It is scheduled for May 31, 2008 at UC-Berkeley.

Posted 05 December 2007 16:14 by bkelley | with no comments

Honeypots in the Database
As a follow up to my post about Cesar Cerrudo's new whitepaper , earlier this month David Litchfield talked about putting honeypots in the database in his blog post, Database tripwires... , to catch someone snooping around. The basic idea for non-Oracle...

Posted 23 November 2007 18:06 by bkelley | 2 comment(s)

Whitepaper on Malware to Attack Databases
Cesar Cerrudo of Argeniss Information Security has put out a new whitepaper (.pdf format), Data0: Next generation malware for stealing databases , describing how malware could be crafted to steal information out of databases. For the most part, it stays...

Posted 23 November 2007 04:01 by bkelley | 4 comment(s)

Tools: Apex SQL Log, Apex SQL Log API, Sample Corrupted Databases
Apex SQL has announced a new version of Apex SQL Log as well as an API for it. Release Notes for Apex SQL Log Apex SQL Log API product page From the product page, it looks like the API can be used to create auditing capabilities using the transaction...

Posted 07 November 2007 14:43 by bkelley | with no comments

The Impact of Architecture/Design Choices
I try my best to get things right the first time. So often, correcting a mistake or bad choice is costly: more costly than it would have been to take the time to do it right the first time. However, as SQL Server MVP Andy Leonard points out, sometimes...

Posted 05 November 2007 15:40 by bkelley | 1 comment(s)

Becoming a DBA, Part II
This is a follow-up to part I from last week. You've considered what you want to do, you've looked at your soft skills, and you still want to be a DBA. How then do you get started? The first thing to do is decide which platform you're going to focus on...

Posted 05 November 2007 12:21 by bkelley | 2 comment(s)

Online Resource: Safari Tech Books Online
I've used Safari (the O'Reilly version ) for a number of years now and it is a resource I often recommend to coworkers. Basically, it's an on-line library of technical books (since expanded to include video) from a group of publishers. O'Reilly, Microsoft...

Posted 02 November 2007 08:55 by bkelley | 5 comment(s)

Why SQL Server 2005 Doesn't Permit Non-ANSI Style OUTER JOINs
As of SQL Server 2005, any database in 90 compatibility mode (settable by sp_dbcmptlevel) cannot support non-ANSI OUTER JOINs. Sometimes these types of joins are called old style joins. An example of such a non-ANSI OUTER JOIN is the following: SELECT...

Posted 01 November 2007 08:00 by bkelley | 1 comment(s)

Tool: KeePass Password Safe password manager/vault
Some time ago I was looking for a password vault and came across some recommendations for KeePass . KeePass is open source and free. It's a nice password manager and some of the features I like are: Strong encryption of the password database The ability...

Posted 31 October 2007 08:00 by bkelley | 1 comment(s)

More Posts Next page »