Voice of the DBA

Author: way0utwest

  • Rewrite the Coding Rules

    Cryptanalyses
    It’s becoming more important to code securely.

    Security is a problem in technology. Whether it’s technological misconfiguration, social engineering, or brute force attacks, we see a constant stream of headlines about security issues. The situation is not likely to change anytime soon as security isn’t seen as a priority by many companies. If that’s the case, then is there anything that can be done to improve security?

    Security expert Dan Kaminsky says that we need a fundamental change in the way we write code. By rewriting the way that code is developers, rewriting the rules, we can reduce the vulnerabilities in our applications. One theory is that our languages and the coding techniques used are making it entirely too easy for vulnerabilities to creep into code.

    It’s an interesting theory, especially these days when it seems so many of our applications are under attack. I suspect that we have lots of poor habits ingrained in many developers. People are loathe to change and they like to continue working in ways that have worked for them. However the world of security in software changes constantly. What might have made you a very effective and productive developer five years ago might make you a liability today.

    I believe that we need to somehow build new coding methods, but even more importantly I think people that provide sample code and framework need to do so in a way that showcases best practices and good habits from a security perspective. That includes presenters, who should never show security issues, even if it’s for the sake of simplicity. Raise the bar and your audience will come along with you.

    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • Verify those Backups

    It’s important that you backup your database. The most important thing you can do. However making backups isn’t enough: you need to verify those backups are good.

    A humorous short video from Grant Fritchey (b | t) and RedGate on why:

    Watch the video

    Ideally you verify every backup every day, but that’s not always feasible. At least make sure you’re doing one backup from every database at least once a month.

  • Teammates

    Terry Tate
    Are you like Terry Tate in your office?

    I loved the Terry Tate commercials as a young office worker. They were unveiled at the Super Bowl in 2003, when I was still managing a database team at Peoplesoft, with weekly issues occurring on our production systems. There were times I wished I could hire Terry to try and convince more people they should be working together using the stick instead of the carrot.

    I have known a few people that worked with former atheletes in real life. If you didn’t recognize them from their past, you might never realize they used to play sports for a career. I was reminded of them by this short slide show that imagined various NFL players as office workers. If you can get past the idea of professional athletes attacking your business problems in the same way they play on the field, the piece shows a number of different personalities that you might find in business. I’ve dealt with many of these in the past, with mixed experiences. I certainly haven’t enjoyed working with the “Lawrence Taylors” of the business world.

    This Friday I wanted to make this a fun poll. I thought you might want to describe yourself or your boss with a famous figure:

    Which professional athlete (or other star) displays the type of traits you think would best suit your position?

    It doesn’t have to be an athlete. Pick someone in the arts, music, movies, etc. Just choose someone famous that you think would exemplify the person you want to be perceived as, or would like to grow to be like. Or represents you now if that’s the case.

    For me, I think Lawrence Lessig has a fantastic way of expressing himself in relatively few words, but in a very logical manner. I also appreciate his passion and knowledge on various topics. Some day I hope I can express myself as well as I think he does.

    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • Join Our Networking Dinner in Seattle

    This is the third year that Andy Warren and myself are hosting a networking dinner in Seattle, just before the PASS Summit. If you are new to the Summit, or just interested in meeting some new people, we hope you’ll join us on Monday, Nov 5, at Gordon Biersch, located in the Pacific Place mall on Pine St. It’s just a couple blocks from the Convention Center.

    We don’t have anything formal planned, just a time and place for people to swing by, shake hands, introduce themselves and talk about what they do, or why they came, or just life in general. It’s a casual event that is just (barely) organized so you have a chance to meet other attendees on an off night.

    If you don’t have plans and want to attend, come on by. Please register so we have an idea of the number of people coming.

    It’s BYOD/BYOF (buy your own xxx), but there’s no fee to attend.

    I’ll be at SQL in the City – Seattle 2012 during the day, another free event, and then I’ll come by afterwards.

    Register today