Voice of the DBA

Category: Editorial

  • Encryption Libraries

    One of the ways we work to implement better security is through the use of encryption. I remember the early days of PGP, VPNs adding end to end encryption, IPSec becoming available, and more. I was excited to see column level encryption come in SQL Server 2005, but it was a bit complex to implement and had issues. The evolution over time with TDE and Always Encrypted were welcome additions, but we can do better.

    Handling encryption in the database can provide some protection, but really, we’d like to see an end to end solution, that ensures data is protected on the wire as well as in the db. Microsoft does a lot of research, and released a Simple Encrypted Arithmetic Library (SEAL) as open source code. This is a C++ library that developers can use to protect their communications. Last year they also released a .NET wrapper to make it easier for a wide variety of developers to use.

    There is a lot more to deal with when handling encrypted at scale. Indexing and search operations are difficult and complex, and can require lots of resources. I think that the Always Encrypted in SQL Server 2019 with Secure Enclaves is a good evolution, but it’s complex to set up, tooling is poor, and maybe more disconcerting, there are potential vulnerabilities with secure enclaves on Intel chips.

    Certainly a combination of developers being able to use something like SEAL and a linkage with a secure enclave on the server for set-based operations might be something we can look forward to in the future. I hope so, as security continues to be a challenge for many of us.

    I’d also like to see more software that is built to ensure users can’t access huge amounts of data, and perhaps easier ways to control the export of large amounts of data. We do need this capability, but we also want very few people, or no people and only a process, with rights to do so.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • Have You Made a Difference?

    On New Year’s Eve, I was reminiscing about the past decade. I started posting some pictures on Twitter from the past decade, which were really memories for me of what had happened in life. Later, I saw this tweet from the Pittsburgh Pirates, quoting the late Roberto Clemente, a renowned humanitarian. The quote is:

    “Any time you have an opportunity to make a difference in this world and you don’t, then you are wasting your time on Earth.”

    The world is in a crisis. Whether you think we are over- or under-reacting, making good or bad choices, or anything else. The reality is that we are fighting a pandemic throughout most of the world, many of us are isolated at home with limited contact with others. Many people are struggling with health concerns, financial issues, job security, and other issues. It’s not just their own personal struggles, but the struggles of others can affect us. Loneliness is certainly a big issue for many, even those living with others and missing their routine.

    Have you made a difference during this time to others?

    It’s a simple question, but it’s one that weighs on my mind. I wish I were a medical professional and could volunteer. I wish I were trained as a first responder and could do something. I’d be happy to go move boxes or otherwise help people working long hours to help others. I’m somewhat upset and guilty because inaction and reducing the spread is more important than my feelings.

    I’ve tried to make a difference in a few ways, with the daily coping in the newsletter and my own blogging for the things I’m trying. I’ve hosted some video calls at T-SQL Tuesday live, just providing a space to touch base with friends and the rest of #sqlfamily. I’m proud my company is trying some things and reaching out the community, without an ulterior motive. Our CEO passionately asked that we do things for the community without regard to sales, customers, or any Redgate purpose other than giving back.

    This is a time to pull together and help others. Many are scared, many are worried, many are dismissive, but even more are struggling. What can you do to help someone else this week?

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • Have You Deployed an Availability Group?

    The last few weeks have been interesting, to put it mildly, with both more and less engagement online. I see more people holding video calls, both inside and outside of work, but I also see less engagement at SQLServerCentral, blogs, Slack, and some of the more common community tools we’ve had. I suspect this new way of working is strange, and it’s upset many of the rhythms that people have built over the years.

    In any case, one very important and common technology in the SQL Server platform is an Availability Group. This technology has been in the product since 2012, and unlike clustering, it’s relatively easy to set up. Not to say it’s easy, and you do need to develop some skills outside of T-SQL to understand how this works. This week I’m wondering how many of you might never have done this?

    Or maybe you’ve done it once or twice and forgotten about it.

    While we’re dealing with the various challenges of a pandemic, this is also a time where you might brush up on a few skills or learn new ones. Deploying, configuring, and testing an AG is something that is valuable to both DBAs and developers, and it’s a good skill to bring to your next interview. Every employer wants to know you understand HA/DR.

    We have a Stairway Series that can help you along with quite a few articles and blogs that people have written. There are various lab posts as well, including a good one from Ryan Adams, that can help you get started. If you don’t have equipment handy, you can build one in Azure for cheap, and even turn off the VMs when you’re not using them and spend just a few dollars a month on storage. That’s not much cost to build a valuable skill in your career.

    If you’ve built a lab, maybe you want to tackle something complex, like the scenarios that Allan Hirt writes about on his blog. If you’ve never done one, maybe try to build one, take notes and capture screenshots, and blog about it. In Word if you want to start a portfolio to send out with your resume, or on your live blog. It might be a good time to start a new blog.

    Focusing on a project like this can help shut out some of the noise in the world and engage you in a new way with your career. Hopefully you are doing well, and life is proceeding for you. If not, maybe tackle a project to take your mind away from things, and check out our daily coping tips in the newsletter.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.

  • Next Person Up

    I have a friend that has had a lot of success in technology. This person was a consultant when I met them, working hourly as I was. Over the last few decades, they have found new opportunities and joined a few large corporations. Eventually this person became a vice president, managing a division. It’s an impressive job, with a big salary, lots of travel and perks, and a lot of work.

    I had dinner with this person recently and they lamented all the hours and stress that comes from a high profile job. Working lots of hours, constantly in touch with others, and pushed to do more. In some sense, this person felt their situation wasn’t that  different than some IT jobs they’d had in the past, though with less pay but similar hours.

    I thought about that for myself. I’ve certainly worked 100 hour weeks while on salary. I’ve slept with a beeper on my chest while on call because I knew it would go off multiple times at night and I’d shut it off quickly without waking my wife. I’ve had the stress and pressure of management pushing and pushing.

    I’ve learned to say “no” quite well in my career. I’ve also learned to find another job when I felt abused. It’s worked well for me, and I think it’s the better way to handle things. That being said, I have never made a huge salary, certainly not anything close to what my friend makes. At the same time, I haven’t felt trapped in a long time, and when I did feel trapped in the past, it was my fault. Usually I learned to move on fairly quickly.

    The thing to remember is that you have to ensure your work and your compensation make sense for you. The trade has to feel fair, because many organizations don’t care if you don’t. I’ve not met many companies that would let me work half as much for half pay, even if I cut some benefits. They aren’t set up to adapt there, and they usually have options.

    For every great job, or at least any well paid job, there are often plenty of other people willing to do the job. For employers that don’t value individuals, either you deal with it, or they will remove you and pick someone else. The higher you go into the org chart, the more true this is, and often this is where the sociopathic tendencies of some executives take over.

    I wouldn’t judge anyone else for choosing their situation, but I do caution you to think about what jobs you take and make the conscious decision to do them. Don’t let yourself get caught into a bad situation, which can sometimes be easy to do, especially when a larger paycheck is dangled. Pick the work that suits you and your family and that you enjoy doing each day.

    Steve Jones

    Listen to the podcast at Libsyn, Stitcher or iTunes.