Voice of the DBA

Category: Editorial

  • Summer Break

    This feels like a strange day in the summer, with a holiday yesterday (Fourth of July) and the weekend starting tonight. This is similar to the Friday after the US Thanksgiving holiday, which is usually a day when very little gets accomplished in most offices. I’ll be a little more productive at home than I would be in an office, but I’ll still have a bit of a holiday lull from yesterday and a weekend coming up. Actually, maybe I’ll get plenty done since I’m sure my body is tired after working on driveway maintenance and (hopefully) rebuilding a trailer hub. (If you haven’t guessed, I’m writing this before the break)

    It’s the start of the second half of the year and a time when many people take holidays. Schools are usually on break, so families often look to travel somewhere. Some of us might take a staycation, catching up on projects at home. I know I’ll be doing that a bit this summer as a busy first half of the year has me way behind on a number of maintenance items and projects.

    We all need a break, so this week I’m asking you what things you might do this summer with friends and family that provide a welcome distraction from work. I’m assuming you’ll have some time off, even if it’s just a weekend, so share a fun event or activity you’re looking forward to enjoying.

    With my kids getting older, we rarely get together. Even on some of the smaller holidays, my son won’t come home from university. If we do get together, it’s often just a meal, though we did have a fun afternoon of bocce after my daughter’s graduation from high school. Maybe we’ll get out this weekend and do that again.

    My wife, kids, and I love music. Some of us play instruments, some of us sing, but we enjoy hearing music all the time. We also enjoy movies, and last year my family when to see Bohemian Rhapsody, which was amazing. The music is great and I recommend this entertaining and enjoyable film. We also saw Rocketman recently, a good, but sad film for me to watch. Perhaps we’ll all go see Yesterday this weekend since we enjoy the music of The Beatles. We’ve been Marvel fans, so I’m sure Spider-Man is on our agenda. This particular reboot is my favorite so far, so that’s a possibility as well. We might have a bit of a debate on which to go see or just go see both.

    I’ve gotten away from most sporting events and live concerts at event centers due to the time commitments (and cost). These days my wife and I may go see a local musician or a comedy act, but more often than not a movie (at home or out) is a way we escape from some of the pressures of life.

    Hopefully you have something you’re looking forward to, so let us know today how you’ll brighten up your summer months.

    Steve Jones

    Listen to the podcast at Libsyn

  • Fines for Data Access

    Most of us know about the principle of least privilege. After I wrote about network segmentation recently, I’d hope that most of us know that limiting access to production data from all workstations might also be a good idea. Many of us also know that unusual patterns of access might indicate an issue. I wonder how many of us have a system in place to look for unusual access, especially this is something that might help us prevent, or at least detect, potential hacking activities.

    I wonder if we’ll get to the point where we need to do more and not only implement better auditing of system, but also data access. Will we need to actually monitor what data is accessed and ensure there is a valid need to do so? That was probably needed in this case, where various employees accessed a woman’s DMV data for who knows what purposes. This is a creepy story, and I’d hope that it’s the rare man that actually does this in any company, for any kind of data.

    As a general recommendation: please don’t spy on someone that you want to date. It’s very much an invasion of privacy and no way to develop a relationship with anyone.

    There were logs of access in this case, which isn’t the case in some states, but there should be more logging of access. The default “black box” trace in SQL Server doesn’t give us much information, though if you have a monitoring system in place, you likely do get more data. The logs of who and what are important, and they are something I’d like to see built into SQL Server by default, an easy way to log activity, with some archival/management of the data.

    Too many of us don’t log anything, and maybe it’s not important for some applications, but in the cases where sensitive data is stored, I think logging ought to be required, and I’m hoping GDPR 2.0 or other laws mandate this, perhaps with some retention of a year. I know I’d certainly like to see this built into more applications.

    The way we handle personal information has been poor for most of the digital age, and I would like to see that changed in a number of ways. I think requiring compliance against a standard might be the best way, though without specifying an implementation. This way we accept the responsibility of safeguarding data that we already should feel.

    Steve Jones

    Listen to the podcast at Libsyn

  • Balancing Hard and Soft Skills

    Many of us would prefer that the technology industry were a strict meritocracy. One where we get opportunities and are compensated according to our skills. We learn to code better, or manage more systems, and we’re seen as more valuable (and rewarded appropriately). Or maybe many of us would prefer that things stay the same, since we might worry that we’d be paid less because our skills aren’t as sharp as our co-workers or our competition for that next job.

    In any case, we don’t work in a strict meritocracy, but if we did, we might recognize that it’s not just your programming skills that are being measured. In this piece on hard and soft skills, the author notes that the importance of soft skills is both more and less serious than we might imagine. If that sounds contradictory, it is, but read the article and you’ll see that this is a complex issue.

    The main point from the author is one that we’ve realized at Redgate for some time, and it’s why we’re constantly refocusing our efforts on teamwork. Most modern systems are too complex to be built by one person, which means a group of people need to work together. DevOps asks us to build a culture of collaboration and communication, which are critical soft skills. It matters less and less if you’re an amazing developer that can’t work with others for some reason.

    I do think that the more you advance in your career, the more important these skills become as your job is not just code. It’s also helping shape the direction of software, teaching others, and sharing what you know. If you don’t have the skills to interact well with others, then I suspect your ceiling may be lower than you like. Or worse, your tenure shorter than you’d prefer.

    At Redgate, we do embed a lot of customer research, discussions, and more inside development teams.  At times, I think we do too much, but then I stop and think about the teams I’ve worked with that didn’t do this. They didn’t necessarily code quicker, certainly lacked understanding and empathy, and certainly didn’t make more customers happy. We’re trying to adopt more soft skills inside the company, while learning to build better software. We still value technical programming skills, but not necessarily above teamwork. More alongside teamwork.

    To build a team, we need to value those in the team, and work with them, not against them. Those are skills that can certainly help us in our career, as well as skills that help any organization learn to operate more smoothly, with more retention. At least, more retention of those that have strong soft skills.

    Steve Jones

    Listen to the podcast at Libsyn

  • CCPA Preparation

    There’s an old Ron White joke about a small airport also being the tire repair center and hair salon. I thought about that when I saw a law firm became a software developer. I don’t know what other enterprise might make a fun trio of businesses, but perhaps a sunglasses shop? Divorces, software, and a new look?

    The CCPA (California Consumer Privacy Act). takes effect in less than a year. This is a law based on the GDPR, and the first strong attempt to regulate data in the United States. I think it’s a good move, though I’m sure large corporations like Google and Facebook will fight it and find exceptions that allow them to play fast and loose with information about many of us humans. I also think, like the GDPR, this will force many smaller companies to better secure, manage, and handle the data they process about companies. I wouldn’t surprise if this also brings about quite a bit of work for consultants and software vendors that help others better classify, protect, and manage their data.

    A new product released by a law firm is designed to help other organizations in a number of ways, based on the knowledge and experiences of the lawyers that have worked in privacy law and compliance for years. They spun off a software development company who built an application that assists with four areas that organizations struggle with: compliance with consumer requests, mapping information flow, generating policy documents, and training employees.

    I’ve worked in a few companies that needed to do most of those things to comply with some standard or regulation. It’s not a difficult task, but it is complex, it’s hard to stay organized, and it’s hard to ensure that everyone understands how the new processes work. While an Excel spreadsheet can track everything you need, once you get beyond a trivial number of employees and systems, the entire system becomes unworkable.

    Instead, some organized system needs to be in place that helps keep all your employees coordinated. I don’t necessarily recommend buying software over building it in many situations, but here I would. There are lots of moving parts when trying to organize your data practices, lots of legal rules that you have to understand, and software is likely much cheaper than legal advice. Your employees will need to learn how to use new software, buy into new processes, and alter workflows, but capturing and documentation is the first step. Once you start to have a handle on what information you store, you can then decide what to do with the data.

    Steve Jones

    Listen to the podcast at Libsyn