K. Brian Kelley - Databases, Infrastructure, and Security

IT Security, MySQL, Perl, SQL Server, and Windows technologies.

Syndication

News

Links

Browse by Tags

All Tags » web security (RSS)
Security by Obscurity?
Andy Warren points to a TechNet article about Security by Obscurity and wanted me to post some notes. Let's start with the example they used. Rename the Administrator account: I agree with Roger's take. We intentionally rename the administrator...

Posted 04 June 2008 10:52 by bkelley | with no comments

Security Issue with SQL Server Reporting Services 2008
I have a CTP of SSRS 2008 deployed to one of my servers. Today I built a couple of reports and from one of my systems, they all tested fine. However, this system, because it is a testing server, doesn't receive the Group Policy Object (GPO) controlling...

Posted 30 May 2008 14:57 by bkelley | with no comments

Recent slate of IIS attacks - more info
The recent slate of attacks on IIS servers don't seem to be an attack directly against IIS or against SQL Server itself. In other words, they aren't going after vulnerabilities in the server product (either one). Rather, the attacks are targeting...

Posted 26 April 2008 08:08 by bkelley | with no comments