Author: way0utwest

  • Fix Your Code

    If you have an ASP.NET site, you might want to double check how the data access is coded. No matter whether you’ve enabled TDE, column level encryption, have strong firewalls or anything else, if you are vulnerable to SQL Injection, someone will get through.

    Perhaps just for fun. Another massive attack took place recently. These attacks will get more automated, and if you are on a well known platform, then you might be vulnerable. Even if you are on custom software, it’s entirely possible a disgruntled employee or a kid engaging in vandalism might attack your site.

    It’s not hard to stop SQL Injection. You just need to learn how and code securely.

  • The School Year

    It’s August and for many people in the world that means that school will be starting sometime this month. My children have a little over two weeks left before they begin, with the mourning for the end of summer break already beginning. Some of us that work at a career for a living will also be starting school. People are pursuing advanced degrees, such as a PhD or MBA, while still managing a full time job, with their workload about to increase this fall as well. However most of us aren’t in either of these situations, and we go to work each day, but come home and (hopefully) enjoy the rest of our lives with family, pursuing hobbies, or some other activity.

    However many of us do have some leisure time that we could redirect to another endeavor. Working in technology can be a stressful, time consuming job at times, but it can also be a fairly easy job, physically. Many of us understand our environments and can often complete our jobs in a reasonable number of hours each week. It’s also a job that often compensates us very well. However it’s a field that demands regular skill improvement for success, security, and opportunity.

    With that idea in mind, I wanted to ask you to think about the rest of the coming year. If you aren’t overloaded at work, and you treat the next few months as the beginning of a school term, how would you answer this question?

    What will you learn this semester?

    Learning new skills can make your job easier (Powershell, administrators?). It might bring new opportunities or projects your way (Powerpivot/Powerview/Hadoop). It might even find you a new job, one that suits you better in some way if you blog about what you are learning and build a project. Learning is almost never time wasted, if you have the time in your life. Consider taking on a small project, working your way through a Stairway series or book, or learning some new skill this fall.

    This time of year is busy for me. I have eight more flights and events booked across the next few months, and a few new presentations to develop and practice. However I’m hoping to find a few minutes each day to work my way through a C# book and improve my skills in that area. I haven’t built any front end software in years, apart from simple web interfaces, and I’d like to bone up some skills, which might bring new opportunities, but will also benefit my job where I need to create some content around the Deployment Manager product, in C#, and hopefully well done. No matter how it turns out, I’m sure I’ll have learned something, and probably had some fun.

    Steve Jones

    Video and Audio versions

    Today’s podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com.

    Follow Steve Jones on Twitter to find links and database related items and announcements.
    Steve Jones Windows Media Video ( 19.8MB) feed

    MP4 iPod Video ( 23.1MB) feed

    MP3 Audio ( 4.7MB) feed

    Feeds are available at iTunes and Mevio

    To submit an article, rant or editorial,
    log in to the Contribution Center

  • The Human Touch

    How often does human error cause issues? Recently we had a rocket crash in Russia,there have been numerous incidents of drone crashes as more and more unmanned aircraft take to the skies, and a few years ago we had an Air France disaster that might have been cause by humans making poor decisions or engaging the wrong controls. Those are incidents where the wrong button press has large consequences, either in physical damage or the loss of life.

    Many of us make mistakes constantly as we work in the various tools and environments we need throughout our day. We click the wrong button in SSMS, we connect to the wrong server and run a script, or we fail to test a change. All of these are mistakes made by humans, and often are mistakes that can be prevented if we did a better job or sticking to routines and processes. That can be hard, but perhaps checklists can help here, along with some double checks by coworkers.

    That’s why I think using scripts in T-SQL, and using the Script button in SSMS to generate the code that you can run (and save) is the best way to work with your servers. As much as I think Powershell (PoSh) can be a pain to write and debug, there’s a good argument to be made for using it when performing complex administrative tasks, especially across servers. Using code rather than forms and buttons is just a better way to accurately and consistently make changes in a controller manner.

    This is an area where everyone could work more efficiently. Developers are usually used to working with version control systems and tracking all their changes. However they often will make configuration changes to their machines, SQL Server, IIS, or some other software, and forget to track the changes. Making these changes in code, through T-SQL or PoSh, and tracking these items in VCS, would help with smoothing software deployments. DBAs and other operations staff should learn to use version control systems  as well, helping to track down root causes to issues.

    Ultimately humans are often the weaknesses in most systems. We should understand that, accept it, and compensate as best we can.

    Steve Jones

    Video and Audio versions

    Today’s podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com.

    Follow Steve Jones on Twitter to find links and database related items and announcements.
    Steve Jones Windows Media Video ( 15.5MB) feed

    MP4 iPod Video ( 19.7MB) feed

    MP3 Audio ( 3.9MB) feed

    Feeds are available at iTunes and Mevio

    To submit an article, rant or editorial,
    log in to the Contribution Center

  • Back and Better

    It’s been a great couple of weeks for me. Even though there was a work trip in the middle, I had a couple days off, travel, two partial work days, and then 3 days with my daughter in Northern California.

    It was a blast, SQL Saturday was great, and I feel much better coming back to work.