Attacking the Weakest Link
When I look at a system and think about its security model, the first thing I start poking around at is where I think security is weakest. For instance,...
2024-05-06
45 reads
Brian Kelley
- Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology
Going to Cloud? Look at the Shared Responsibility Model
The bottom line here is this: the idea that a CSP takes care of everything for you is a fallacy that really needs to die. Thompson, Graham. All-in-One CCSK...
2024-04-24
61 reads
RTO and RPO are myths unless you’ve tested recovery
I’ve watched teams spend a lot of time on backup strategy. They plan out the full, differential, and log backups to ensure they can successfully meet the recovery point...
2024-04-17 (first published: 2024-04-05)
295 reads
Tomorrow: Webcast on SQL Server security
Tomorrow, April 16, 2024, I will be giving another webcast; this one will be on SQL Server security. It’s scheduled for 1 PM EDT / 5 PM UTC. Sign...
2024-04-15
14 reads
Webcast: How to Secure SQL Server – End to End Security
On April 16, 2024, I will be giving another webcast; this one will be on SQL Server security. Sign up link As always, the registration is free. Here’s the...
2024-03-29
91 reads
Tomorrow – Webcast on SQL Server Administration
I will be giving another Microsoft SQL Server-based webcast, this time on the administration of Microsoft SQL Server. The webcast is scheduled for March 26, 2024 at 1 PM...
2024-03-25
16 reads
Webcast on SQL Server Administration
I will be giving another Microsoft SQL Server-based webcast, this time on the administration of Microsoft SQL Server. The webcast is scheduled for March 26, 2024 at 1 PM...
2024-03-15 (first published: 2024-03-08)
307 reads
Humble Bundle of Java Books
I try to keep an eye on the Humble Bundle bundles for books. The bundles serve two great purposes: I was able to grab the Cybersecurity bundle, but by...
2024-02-26
122 reads
Security Justifications for Infrastructure as Code (IaC)
Last week, the Cybersecurity & Infrastructure Security Agency (CISA) put out an emergency directive which ordered federal agencies to pull Ivanti Connect Secure and Ivanti Policy Secure installations from...
2024-02-23 (first published: 2024-02-05)
187 reads
David Kahn, legendary author, has passed away
I first saw this at Schneier on Security. David Kahn, author of The Codebreakers, has passed away at 93. The Codebreakers was considered the best book on the history...
2024-02-05
40 reads
Blogs
Using Cron in Postgres Flex
pg_cron is a simple cron-based job scheduler for PostgreSQL that runs inside the database...
Can I Change a Primary Key Value? #SQLNewBlogger
By Steve Jones
I heard someone say recently that you can’t change a primary key value in...
SQL Server Index Primer
By Kevin3NF
Indexes 101: What, Why, and When? “What Is an Index?” I get this question...
Forums
How do you keep track of the purpose for SQL Logins?
Wondering how others keep track of the purpose for SQL Logins? I'm not talking...
Just a rant about the SQL Server 2022 upgrade
Upgrading an instance of SQL Server 2019 to SQL Server 2022 - I am...
Report Server Configuration Manager - The target principal name is incorrect SSL
SQL Server SSRS 2022. Running into ' SSL Provider, error: 0 - The target...
Question of the Day
Getting the TEXTSIZE
How can I check what value I used for TEXTSIZE? I ran this code:
SET TEXTSIZE 8096But then deleted the code and couldn't remember. Is there a way to check this? See possible answers