Voice of the DBA

Category: Editorial

  • Data Philanthropy

    philanthropyThe idea of philanthropy is giving back to the world, doing some good because of the success you have had or gifts you’ve received. Imagine that we thought not about giving our time or money, but our data instead.

    I read this piece on data philanthropy that talks about the possibilities of improvement in the public service and applications we have from philanthropy. However the piece talks not about more resources, but more data, coming from the private sector. Data from cell phone companies, transportation companies, and more that can help us better understand how the world is functioning, how it interacts, and how that might affect the public goods and services.

    I like the idea of Open Data that exposes more information from our government to the private sector for incorporation in applications, for additional analysis by private entities, and for the transparency that our government is acting in our collective best interests. However you believe government ought to function, without more data about how it does function and uses its resources, we can’t know about which things we should seek to influence.

    However I think we have a tremendous amount of data being collected by companies that can help government run more efficiently, and making the corporate decision to share that data can help improve the communities in which a company does business. We know that much of our data has information, but we can’t take advantage of all the information, and may not want to. Perhaps donating some of this data to the collective good is a way to adhere to, and reinforce, the social responsibility many companies include in their annual reports.

  • Hack Resistant

    Security should be on the forefront of every data professionals’ mind. It doesn’t matter if you are developer, administrator, or other position, you ought to be considering the security implications of changes you make to the database. More and more data is being stored in databases, and often it’s moved between databases as well. Whether that’s to data warehouses, or development environments, we ought to be considering security to be more a part of our daily work and process rather than something limited to specific systems.
    Vendors are trying to make systems more secure. I see the encryption capabilities grow with each version of SQL Server, and new features have been added, like TDE, to help technology professionals secure their data. Other vendors have introduced other safety mechanisms, and one caught my eye by claiming to be “hack resistant“. It’s the ZenithVault database says it is practically impossible for hackers to gain access to storage systems and steal confidential information. It supposedly does this by “data splitting”, moving parts of data onto separate servers.
    It sounds like a good solution, in the same way that TDE is a good solution. If someone is able to access your physical files, they won’t be able to read the data in them. That’s a good precaution, and it works well in TDE’s case (I can’t speak for ZenithVault), but it’s also not hack resistant.
    The biggest hacking problem that I see in the world today is with SQL Injection. Since legitimate accounts can access your database, often through web-based front ends, and SQL Injection uses these same accounts to access data, none of the encryption and security capabilities you set up protect you. None of these items come into play when you have code that allows hackers to inject their own commands through your existing application, web based or not.
    Secure coding is important, and it’s something that we should all require and practice as we build software. Your application might not access secure data today, but that might change in the future.
    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • The Desktop

    eweweew-580x323Lots of IT professionals I know have moved to laptops for their daily work. This allows them to keep their work handy, no matter where they are. If they need to work from home, or on a trip, they have their tools with them. It’s a good move for many people, but I wonder if it’s what the majority of professionals want. As a side note, if you have a work laptop, with work data, you ought to be using whole disk encryption.

    When I worked as a production DBA, it was handy to have a laptop to connect to work from home and check on things. However I felt this was a double edged sword, with the responsibility of carrying the laptop with me, and the expectations of management that I would be “more available” than if I didn’t have a portable work machine.

    Recently I thought about this when I saw a release for a new desktop PC that is “no wider than a golf ball“, the new ThinkCentre M93 from  Lenovo. It’s small, and powerful, with enough power for many developers and administrators that might work in the technology area. It’s also one of those machines that I might consider portable.

    To me this might be the best of both worlds. Something that’s a desktop, removing me from the responsibility and obligation to take it home with me every night. However small enough that if I did need to work at home, to monitor a process, or get something done away from the office, I could pack it up and use it at home.

    I wonder how many of you have laptops from work, or desktops, and if you prefer one or the other. I used to appreciate an employer picking up the expense of a laptop, but these days I’d prefer to buy my own and let the employer keep their equipment in the office, and out of the rest of my life.

    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • The Reorg

    I haven’t been thrilled with how Microsoft has been run over the last decade. As a stockholder, I’ve been disappointed. As a technologist, I’ve shaken my head all too often at the various ways in which I think the company has failed to grow and reinvent itself. I’ve been concerned over the lack of coordination and focus that many groups have had, changing priorities and abandoning technologies instead of building products that impressed people with their fit, finish, and constant enhancement.

    Don’t get me wrong. I think SQL Server has grown, changed, and amazed me at times with the enhancements. At the same time I’m disappointed with the lack of improvement in tooling for things like replication and Service Broker. There seems to be a lack of coordination at times between the various languages used by pieces of the platform, almost like the fractured standards that plauged parts of the Office Suite in the past. I moan the lack of resources devoted to improving features like encryption. At times it appears that whole sections of the platform are ignored during development cycles.
    I don’t know if this large scale reorganization will improve the way Microsoft functions. I have concerns about the bundling of Windows into one group, and the potential issues with trying to force the product to work the same way on tablets, phones, and desktops. Devices and services sounds good, but ultimately I think that Microsoft needs to ensure that the software works well, with a high degree of fit and finish that meets the particular platform on which Windows runs.
    I like how Windows Phone looks, but I bemoan the lack of applications. As important as marketing can be, I truly think that Microsoft needs to get back to the “developers, developers, developers” mantra and not only entice developers, but reward them for helping catapult Windows Phone onto equal footing with iOS and Android.
    Most of all I wish Microsoft would go back to being a technology company, with a focus on cool, exciting technology, with a leader that appreciates, uses, and understands how exciting technology can be.
    Steve Jones