Author: way0utwest

  • A Good Security Response

    I'm glad Evernote acted quickly and decisively with this incident.
    I’m glad Evernote acted quickly and decisively with this incident.

    Security will become more and more important in the future, at least in my mind. As we become more interconnected and dependent on digital services, if the level of fraud and security failures do not fall, many people will hesitate to use these services. I think certificates will be the future of digital security, but until we get better support for managing them built into all our OSes, I’m not sure we’ll move beyond passwords. I do think we need to move past passwords, but we’re stuck with them for now.

    Recently Evernote had a security breach and they forced all users to reset their passwords. It was slightly annoying, but it was a comforting response for me. Two week after the incident I had to change the password on my iPad, which I rarely use. It was ironic since I was working on this particular piece when I reset my password.

    I wasn’t the only one that thought this was a good response. In this article from Enterprise Security, a number of security professionals praised the way Evernote handled this incident. They note that Evernote had implemented good security practices (from what we know) and notified people immediately. I certainly appreciate Evernote moving quickly on this and am glad I had to deal with the annoying password change. I don’t use the same password on other sites, and this was a good reminder to me that I shouldn’t. It also served as a reminder to tell my family to do the same thing.

    I’m not sure any company I’ve worked for would handle things this way. I haven’t had many security incidents at my previous employers, but I know in one case we were told not to disclose anything and fix issues. I’d like to think that most companies would disclose this, and I do think they should, but most wouldn’t. These things happen, just like break-ins happen in physical buildings. Companies should accept that, diagnose the issues, repair them, and move on. Customers will understand the problem and remediation steps. What customers don’t understand, or accept, is a company failing to inform them. Or failing to improve security when they know there are issues.

    Steve Jones


    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • SQL Saturday #187–Richmond Recap

    I’m late writing this, and I did mean to get to it earlier, but life got in the way.

    TL;DR: It was a great event, lots of fun, and I’d love to do it again.

    When I first heard of a SQL Saturday coming back to Richmond (from Carlos Chacon of the Richmond SQL Server Users Group at SQL in the City 2012 – Boston), I started making plans to attend. I used to work in Richmond, for Dominion Resources in the Innsbrook area, and have spent a good amount of time in the city.

    The timing for Richmond was perfect, as Red Gate has been looking to experiment with some smaller events where we can teach people about SQL Server in The Red Gate Way. We decided to try this in Richmond, with Grant Fritchey, myself, and two of our salespeople flying into Richmond on Thursday night. I drove down from Washington D.C., arriving just in time to take a 30 minute walk around the Innsbrook area before delivering an encryption talk to the Richmond SQL Server User Group.

    One of the things I loved about growing up in Virginia was all the history of the beginning of our country which is noted and celebrated there. This statue outside the user group building has the US Constitution engraved in it.

    Photo Mar 07, 4 00 35 PM

    Friday had me up early, getting a little exercise before heading over to the Hollywood Cemetery with Grant Fritchey. We walked around for a half hour, seeing Jefferson Davis’ tomb along with many other famous Confederate resting places.

    Photo Mar 08, 7 34 59 AM

    We also saw this amazing pyramid, seemingly constructed of loose stones. No mortar we could find.

    Photo Mar 08, 7 43 23 AM

    Afterwards it was prep time for our Micro Event with The DBA Team. This was a short, four hour event where Grant and I each presented two sessions. This was our experiment, designed to let us talk about technical talks and include information about how our tools help you solve problems.

    Photo Mar 08, 12 28 40 PM

    We talked about these topics, in a technology neutral way, but our demos included Red Gate products. This isn’t a sales talk, but really a way to educate and inform people about SQL Server topics, but we include our products in the demos to show how easy it can be to handle any of these items:

    • backups
    • monitoring
    • indexing
    • corruption

    The event went well, and I’m hoping we try a few more of these at other events later in the year.

    One interesting thing I learned was a number of people attending our event hadn’t heard about the SQL Saturday, as well as vice versa. Definitely we, and the events, need to market better. Somehow.

    After a short happy hour, Grant and I drove over to the speaker’s dinner for SQL Saturday. This was a nice get together for speakers and volunteers at a local restaurant. We had the chance to catch up with quite a few people we hadn’t seen in a long time. I love having a few hours to chat and bond with the speakers and volunteers.

    Note for all organizers: I appreciate the dinner, but I’d be happy with us just meeting in a room and each person paying their own way. The important thing is for us to get together and enjoy the company.

    Saturday morning was a drive over to the University of Richmond. I’d never been there, and as we wound through large houses on big, treed lots, I wasn’t sure Google Maps had me going to the right place. It did, and we arrived at the campus, which was beautiful. Spread out, hidden in trees, brick buildings, an amazing location. I was reminded of the University of Virginia, which I attended.

    The event was in the Science building, which had a large, open atrium. All the vendors were set up, and as usual, the rooms were spread out. That made for lots of traffic between sessions, but that’s not bad. I thought it was fairly easy to find all the rooms and plenty of people were willing to point those that looked lost in the right direction.

    I started the day with Matt Velic’s session on building a virtual lab. He took an interesting approach, using free software to do this. Virtual Box, FreeNAS, and more allowed Matt to show how a virtual clustered environment can be set up for testing.

    Photo Mar 09, 6 46 18 AM

    Matt has blogged about this a bit and even written an ebook that you can download to learn how to build your own lab. He did a good job, though I’ll admit I had to duck out early to take a phone call.

    The inclusion of the ebook, which Matt mentioned a few times as stragglers came in, was good. I’ve been toying with the idea of providing some “prep” materials, as well as post talk support for attendees. Understanding a little of what the background for the material is might allow some presenters to go a little quicker for some talks. Something to consider for the future.

    I also slipped into Karen Lopez’s database modeling talk. Karen has a fun style, and this was an interactive talk, with people being asked to “vote” on various topics with post it notes.

    Photo Mar 09, 8 16 43 AM

    I sat in the back watching, and was glad to see so many people, probably everyone, participating. Based on the “votes”, Karen led some fascinating discussions.

    Photo Mar 09, 8 18 29 AM

    If you get a chance to see Karen, do so. This was a great talk, and thought provoking for those of us that have had to design databases.

    I was up before lunch, delivering my “Branding” talk for an audience in the auditorium. I was glad to have a little pad with lunch following my talk as I ran a little over. It was a fun talk, and had some good tweets.

    Capture_023

    It was also special as my Mother had driven up from Virginia Beach to see it and spend a few hours with me. I ate lunch with her and spent a little time before she left and I headed out to chat with more people.

    The events are always a busy day for me and this was no exception. While most people are in sessions, a few are always wandering around, and I had a few short chats with people that were attending the event, as well as some other speakers and vendors.

    In the afternoon I presented my Encryption Primer before packing up at the end of the day.

    The closing event was well attended, with people packing into the auditorium for thank-you’s and prizes. A nice tribute from the organizers for the speakers and volunteers, including recognition of the young lady who arranged for the use of the building. I hear this a lot, but many people don’t, and it’s always nice to remind people that this “free” event actually required work, effort, and donations from many people.

    There were lots of prizes given out, and some fun drawings as Carlos’ daughter participated in picking entries. I love seeing kids involved since they are the future of events and business, and letting them see all the people willing to work on improving their careers is a good role model, IMHO.

    I left right after the drawing, skipping the after event as I had to drive back to Washington DC. I arrived late, grabbing a hotel and a late dinner, but I had a nice surprise Sunday morning. My name on a sign.

    Photo Mar 10, 8 04 55 AM

    A fun event and trip for me.

    I know this event was stressful for the organizers, and it always is, but it ran smoothly, and people learned things. Yes, the coffee was slow to get out in the morning. Yes, rooms were spread out all over the building.

    None of that’s a big deal. People came, they learned things, and that’s the whole point of these events.

    Great job, Richmond, and I hope to come back in the future.

  • A Week from Omaha–SQL Saturday #197

    speakingsqlsat197Next week I head out to SQL Saturday #197 in Omaha NE. I’m looking forward to it as I’ve never been to Omaha, and only been to the state once, in the far SW corner to Oshkosh for a horse race. I’ll arrive Friday and have a short time to look around the city before the event gets started.

    If you are in the area, there three great pre-cons you can register for and attend on Friday. These are a good, low cost way to get some practical knowledge for your job from some knowledgeable experts. The choices are:

    • Practical Self-Service BI with PowerPivot 2012 for Excel – Bill Pearson
    • Prof. PowerShell Or How I Learned to Stop Worrying and Love PowerShell – Jeff Hicks
    • Scaling SQL Server 2012 – Glenn Berry

    I’ll be presenting a talk on encryption in the afternoon, but am looking forward to watching a few other sessions earlier in the day. I missed Kevin Boles talking about Window functions earlier this year, but I’ll catch him here. I’ll also be looking to see Bill Fellows talk a little T-SQL and Joe Sack talk about Troubleshooting Query  Plans. There are lots of other great options as well, and if you’re in the area, consider attending.

    This should be a fun event, and if you’re a SQL Server professional looking to learn a bit more about the platform and improve your skills, this even is worth a Saturday of your life.

    Register today and I’ll see you in Omaha.

  • Car Data

    I don't know if I like this layout, but I like more data being available from my car usage.
    I don’t know if I like this layout, but I like more data being available from my car usage.

    I really like cars. In my lifetime I have owned more than my share of vehicles, and I always look forward to renting new makes and models when I travel, just to drive something different. As cars have evolved over the last few decades, there are some things about the changes I love, and some things I dislike. Personally I like the idea of a key fob that enables me to unlock the car and start the engine with a button without pulling the keys out of my pocket. However, as someone that’s lost my share of keys, I’d prefer a real key as a backup mechanism. Unfortunately that doesn’t seem to be an option many manufacturers want to provide. I dread having to replace a $200 “smart key” at some point in order to drive my car.

    Cars have implemented a wide array of technology over time, some of which drivers are not even aware. These days cars gather an impressive amount of data, though probably not quite at the scale of the new Dreamliner. Or maybe they do. According to this article, cars can produce “hundreds of MB/s” in data acquisition. I would guess most of that data is thrown away, but some may not. I was quite impressed with the amount of data Tesla logged during the recent test drive controversy with one of their vehicles.

    All this data, and the potential need to manage it, mine it, and perhaps make it available to other applications, is another sign of just how important our jobs as data professionals may be in the future. More and more of the things we encounter on a daily basis are creating data that we may turn into information for business decisions through creative uses of software. While some parts of our database systems may become easier to use, I suspect there are no shortage of new skills we will need to learn in the future to make sense of our data.

    Mobile technology, whether with cell phones or transportation (planes, trains, and automobiles), will become more prevalent in our lives in the next decade. I suspect this will mean many more opportunities for data professionals. Especially as I’m sure there will be new regulations and requirements that will keep software developers and database professionals busy modifying applications as legislation tries to catch up with the creativity of technologists.

    Steve Jones


    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.