Voice of the DBA

Category: Editorial

  • Shared Security

    When I worked in a large Operations team, we had various passwords for some systems that we stored in a password vault. This was on a network share that only the administrators had access to read. We used this for keeping a number of passwords for various services and systems that required sysadmins to access.

    However, we tried not to use shared accounts whenever possible. We wanted to ensure an audit trail, for both compliance and understanding of what happened in our environments. All sysadmins had two accounts, which allowed them to access most services. We only had a user/password stored for certain systems that needed some sort of separate account, and we did change those passwords regularly.

    Our customers didn’t always do this. In fact, I regularly found different groups using a single account, always logged in, for which everyone knew the user name and credentials. They never seemed to consider this a problem, despite regular security warnings from administrators.

    I was reminded of this story about a water treatment facility in Florida that was hacked. They had a shared account, used by many people, the same password for everyone, and a lack of a firewall. An intruder caused a release of chemicals, but no one was injured.

    Firewalls prevent a lot of issues, if they are configured to limit access. In addition, ensuring that each user has different passwords is important. This allows you to turn off access for certain people, which includes former employees. That’s basic security, and I’m surprised how often people forget about this, often because they worry about some system breaking.

    The tools we have to enforce stronger security have improved over the years, but we need to take advantage of them, and we need to ensure that good, if not best, security practices are followed. It’s easy to become lax over time, but remember that there are lots of threats out there, from hackers to malware, to former employees.

    Far too many people are attacked, more than are in the news, so don’t get complacent. We are all at risk.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher, Spotify, or iTunes.

  • Being Professional

    I often write about data professionals, meaning those people who work with data and are paid to do so. Certainly some of you might be amateurs, doing data work as a hobby, but most of the people that visit SQLServerCentral work with data as a part of their career.

    The second part of that title is the “professional” part. What does it mean to be a professional? I saw some thoughts from Randolph West recently that caught my eye. He talks about treating others as you’d like to be treated, which is a good place to start for most of us.

    However, there are other considerations for being a professional in Internet age. Randolph covers a few, in terms of respecting others’ form of address, their time, and their own struggles. The world of work has blurred with personal time, especially when most of us are not in the same physical location, and our “environment” might include people that don’t actually work for the same organization.

    I’ll add a couple more items here that I think are important to being a professional these days. While we do understand that children, pets, and more might interrupt meetings, understand that security and privacy for our organization (and its data) is important. Lock your machines, watch what you share out loud, and caution your “co-workers” against sharing things that might be secure or sensitive.

    In line with that, be aware that you might accidentally share something from your personal life on a video call. While you don’t need to wear a suit and tie, you might ensure that you are not wearing something inappropriate. Certainly there is a running joke that people at home might not wear pants. Whether you do or not, be aware that standing up without pants wouldn’t be very respectful. It might also be career limiting.

    As we continue to move forward in work and life, with the challenges of both always and never being at work, for some or all of us, be professional to each other likely means being respectful, understanding, appreciative, and sensitive to others.

    It’s not my world; it’s not your world. It’s our world.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher, Spotify, or iTunes.

  • Coding Tips

    I really like Visual Studio Code. The more I use it, the more I get comfortable in it, and the more I appreciate the design and flow of using the editor. I didn’t feel that way early on, preferring the comfort of Visual Studio, but now I most often use VS Code.

    The other day I saw an article from one of the PMs for the product, with a number of tips and tricks. I like some of these, and have already found a few to be handy in my work. I’ve even started to search out a few more of these, and found this repo with items in it.

    This reminds me of a few articles at SQLServerCentral on SSMS (tips, tricks). I’ve written a bit on Azure Data Studio and git, often to help cement some skills in my mind, as much as to help you learn more.

    I’m sure many of you have your own tips and tricks today, for both data platform tools and others, so I’m asking you to share a few in the comments. If you have a large collection of tips, on tools or just how to write code, write us an article. I’m sure others would love to know how to be more productive.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher, Spotify, or iTunes.

  • The Growth of Terabytes

    Years ago, fresh out of university, I joined the IEEE. As one of the benefits, I got their magazine, with various articles that might expand my knowledge. In one issue, I remember reading about the challenges of video on demand. At the time, calculating what it would take to store digital movies and broadcast them to each TV seemed like an impossible task. This was in the days if hardwired 10Mbps Ethernet and dial-up Internet.

    Not too long ago I had some Internet bandwidth issues, and got some stuttering during video meetings. I run Rainmeter as a skin on my PC, and once I got things working, I was curious what sort of bandwidth I was using. These days, if I’m not doing any streaming of audio/video, my PC seems to need about 1-3kbps to keep Tweetdeck, Outlook, Slack, etc. going. Youtube seems to get bursts to 1.5Mbps every few seconds, but plenty of low < 100kbps times in between. Netflix seems to be a steady 2Mbps to get video.

    All of that doesn’t seem to add up to much for my household. Even when 5 of us lived here, with lots of streaming from the kids, our symmetrical 15MBps connection worked fine. I don’t know what our total usage was for the month, but I doubt we used 1TB a month. Actually, if I calculate it out, full use of 15Mbps for a month is about 4TB, so maybe the kids got there?

    Apparently, more and more people are getting there. A report shows that 14% of some weighted set of subscribers use over 1TB a month. This is over their broadband connection, and likely leaves out mobile usage. While lots of this usage and bandwidth is transient data, like streaming movies, this also means that some data professionals, and network professionals, need to manage the data that flows.

    For many data professionals, this isn’t necessarily a problem, and in some sense, this is good for us. Heavy usage pushes the network staff to increase the speed and capacity of links. That means those of us transferring data (CSVs, backups, etc.), can get our jobs done faster.

    So watch more movies, stream more music, and root for the carriers to increase speeds and capacities.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher, Spotify, or iTunes.