Voice of the DBA

Category: Editorial

  • Desktop or Laptop for Remote Work

    When I started working in a corporation, I was assigned a desktop. No choice of hardware and upgrades were extremely rare and limited. This was in the early 90s, and laptops were rare, and they were coveted by those that received them. I was lucky to get to use one when on call, to allow me to remotely dial in when we had issues. Yes, I dialed in after being paged.

    Over time, laptops became more common, and as I began traveling for work, I had one full time. The last few years, I’ve depended on laptops while working for Redgate. I even ask for advice periodically when I look for a new one. Today I have two active laptops that I carry when (and if) I travel.

    However, I also have a desktop. In fact, I’ve maintained a desktop all throughout my time at Redgate and use that for most of my daily work. I like the multiple screens, and I can’t beat the multi-TBs of storage, lots of cores, tons of RAM, and more. I like my desktop, and I prefer using it.

    This week I saw an article on the reasons why a desktop PC makes more sense than a laptop. With the move to more virtual, and solo work, does a laptop make sense? Certainly there is a tradeoff. Being able to move to a different room in your house if others are using the same space is helpful. Having kids pick up your laptop and leave it elsewhere is less helpful.

    These days, I wonder how many of you feel? Some of you have dedicated office space, some do not. Some like the more powerful desktops, some prefer to flexibility of laptops. Some want to control their hardware, some want to just have a pre-assembled package.

    This week, how do you feel? Do you like desktops or laptops more? Have you changed your mind through this pandemic? What about the future, will you change for your next machine?

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • Attacks on Unsecured Databases

    Imagine that you’re a researcher doing some data analysis for your company. You run some queries or load some data and then go home. The next day, you come in and find that all of our data has been deleted. Perhaps you’re the victim of a Meow attack, where people look for unsecured databases and wipe them out. If you read the comments, many of them indicate this may be considered a public service.

    I think I agree with that, and here’s why. If you put up data about me in a system and don’t secure it. I’m not sure you should be trusted with the data. The article notes that UFO VPN was a victim. They got caught not only with an unsecured database, but one that had data that wasn’t supposed to be logged, including passwords. They moved their data to a new database, also unsecured, and a meow attack wiped it out.

    While I understand this might cause a company to fail and affect employees who hadn’t made the decision to store this data and ignore security, I’m don’t think that the world overall is worse off because their data is gone. I’m also not sure that the employees are worse off as I’d suspect fines or other legal action might have wiped the company out anyway.

    I know some university groups may lose data that is difficult or impossible to recover. I know some companies might be irreparably harmed. However, I also know that it’s 2020 and there is no reason to have an unsecured set of data available to the public. Whether a database, a file-share service, or anything else. Security needs to be provided for data.

    Like many of you, I do use some services in the cloud to share files. I also find it maddening that most public access has been revoked and I need to specifically invite people, set passwords, and more to easily share things. However, that’s what we need to do in an interconnected world where we have personally identifiable and sensitive data. We need to secure it.

    I’m glad SQL Server doesn’t allow blank passwords for sa, and I hope that no one allows simple, easy passwords on their systems. It is convenient, but the price your organization might pay for this convenience could put them out of business. It’s also a large price to ask someone whose data you have to pay if it impacts their life.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • A Data Attack

    I got a new mobile phone and was going through the setup. On top of numerous Android updates, I had to reset a number of applications back up. While it’s a pain, I also appreciate from a security standpoint that moving access to my data and sites to a new device could be an issue. One of the applications I was trying to set up was Garmin Connect, as I track my exercise, heart rate, and more on my watch. When I first tried this, I got a 404 in the app, which was strange.

    Apparently Garmin was having issues. They had a large outage. The next day I saw that article, and while I could get to the main Garmin site and log in, I couldn’t get a new install of the app to connect on my phone, and I couldn’t get access to any of my workout data. Even old data, apparently isn’t on my phone, as I thought. It’s being read from the cloud. That’s disconcerting, though I record my data separately at MapMyRun, so I’m not overly worried. I even found a procedure and tested it for saving my data locally.

    Over the weekend after this happened, I didn’t do much, but as of the Monday after the attack, the Verge reported that some data was visible and sync was working. Not for me, but for someone. That’s good, and Garmin has a touch of information about the outage, saying they expect devices to begin syncing at some point. Mine didn’t that day, but did a day or two later.

    This is interesting as an attack because it’s not just the company’s own internal data, but also their customers’ data. I don’t know if that was the intention, but what better way to put pressure on a company that take away their customers’ data. I don’t know that this would make them respond differently than losing their internal data, but it  likely would be more public. It also might put more pressure on them to pay some ransom.

    Ultimately, this is an area that I think the GDPR started to help, but allowing customers to access copies of their data, as well as have rights over how it is used. I think having the right to not only get a copy of my data, but a regular backup is something I think should be required of organizations that collect information about me. Likely there might need to be a charge, but perhaps some regulation about what is reasonable and how this data should be available is a something else that might need some regulatory boundaries.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • Finding Separation During WFH

    Work life isn’t the same for all of us. In fact, as I read through this HN thread, I find that work is more varied than I often consider. I haven’t worked for any of the big tech firms (FAANG or MSFT), but I have worked for companies that had a variety of perks, including food, gyms, childcare, and more. I’ve taken advantage of, and not been interested in, these perks at different times in my life.

    Many of us are working from home (WFH) for the first time in an extended fashion. I’ve been quite fascinated in the differences amongst my co-workers. Most of them love this and are looking forward to the remainder of the year at home. Some don’t like it, and feel trapped. I’ve been WFH for nearly 20 years, but I’ve often been able to change my environment through travel or working in public spaces, which aren’t really a good idea right now, even if possible. So I’m perhaps struggling to cope more than I expected.

    Now that we’re four months in for most of us, I wonder how many people are coping, and maybe more importantly, how are you achieving separation from work in your life? Are you setting work hours or shutting down your work communications? Perhaps you have some other technique?

    I have tended to pop into my office often in the past, most every day, even weekends. The flip side if I often pop out of the office during the week for the gym or to do some personal task. I’ve also started to avoid even going into my office on the weekends, using my laptop if I need to browse the Internet for some knowledge, without opening Slack/Outlook/Twitter/etc. Trying to completely disconnect on the weekends.

    If you are coping, or perhaps not coping, feel free to drop a note in the discussion, give a tip, ask for advice, or just let us know what you like or don’t like about your environment.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.