Voice of the DBA

Category: Editorial

  • Hack Resistant

    Security should be on the forefront of every data professionals’ mind. It doesn’t matter if you are developer, administrator, or other position, you ought to be considering the security implications of changes you make to the database. More and more data is being stored in databases, and often it’s moved between databases as well. Whether that’s to data warehouses, or development environments, we ought to be considering security to be more a part of our daily work and process rather than something limited to specific systems.
    Vendors are trying to make systems more secure. I see the encryption capabilities grow with each version of SQL Server, and new features have been added, like TDE, to help technology professionals secure their data. Other vendors have introduced other safety mechanisms, and one caught my eye by claiming to be “hack resistant“. It’s the ZenithVault database says it is practically impossible for hackers to gain access to storage systems and steal confidential information. It supposedly does this by “data splitting”, moving parts of data onto separate servers.
    It sounds like a good solution, in the same way that TDE is a good solution. If someone is able to access your physical files, they won’t be able to read the data in them. That’s a good precaution, and it works well in TDE’s case (I can’t speak for ZenithVault), but it’s also not hack resistant.
    The biggest hacking problem that I see in the world today is with SQL Injection. Since legitimate accounts can access your database, often through web-based front ends, and SQL Injection uses these same accounts to access data, none of the encryption and security capabilities you set up protect you. None of these items come into play when you have code that allows hackers to inject their own commands through your existing application, web based or not.
    Secure coding is important, and it’s something that we should all require and practice as we build software. Your application might not access secure data today, but that might change in the future.
    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • The Desktop

    eweweew-580x323Lots of IT professionals I know have moved to laptops for their daily work. This allows them to keep their work handy, no matter where they are. If they need to work from home, or on a trip, they have their tools with them. It’s a good move for many people, but I wonder if it’s what the majority of professionals want. As a side note, if you have a work laptop, with work data, you ought to be using whole disk encryption.

    When I worked as a production DBA, it was handy to have a laptop to connect to work from home and check on things. However I felt this was a double edged sword, with the responsibility of carrying the laptop with me, and the expectations of management that I would be “more available” than if I didn’t have a portable work machine.

    Recently I thought about this when I saw a release for a new desktop PC that is “no wider than a golf ball“, the new ThinkCentre M93 from  Lenovo. It’s small, and powerful, with enough power for many developers and administrators that might work in the technology area. It’s also one of those machines that I might consider portable.

    To me this might be the best of both worlds. Something that’s a desktop, removing me from the responsibility and obligation to take it home with me every night. However small enough that if I did need to work at home, to monitor a process, or get something done away from the office, I could pack it up and use it at home.

    I wonder how many of you have laptops from work, or desktops, and if you prefer one or the other. I used to appreciate an employer picking up the expense of a laptop, but these days I’d prefer to buy my own and let the employer keep their equipment in the office, and out of the rest of my life.

    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.

  • The Reorg

    I haven’t been thrilled with how Microsoft has been run over the last decade. As a stockholder, I’ve been disappointed. As a technologist, I’ve shaken my head all too often at the various ways in which I think the company has failed to grow and reinvent itself. I’ve been concerned over the lack of coordination and focus that many groups have had, changing priorities and abandoning technologies instead of building products that impressed people with their fit, finish, and constant enhancement.

    Don’t get me wrong. I think SQL Server has grown, changed, and amazed me at times with the enhancements. At the same time I’m disappointed with the lack of improvement in tooling for things like replication and Service Broker. There seems to be a lack of coordination at times between the various languages used by pieces of the platform, almost like the fractured standards that plauged parts of the Office Suite in the past. I moan the lack of resources devoted to improving features like encryption. At times it appears that whole sections of the platform are ignored during development cycles.
    I don’t know if this large scale reorganization will improve the way Microsoft functions. I have concerns about the bundling of Windows into one group, and the potential issues with trying to force the product to work the same way on tablets, phones, and desktops. Devices and services sounds good, but ultimately I think that Microsoft needs to ensure that the software works well, with a high degree of fit and finish that meets the particular platform on which Windows runs.
    I like how Windows Phone looks, but I bemoan the lack of applications. As important as marketing can be, I truly think that Microsoft needs to get back to the “developers, developers, developers” mantra and not only entice developers, but reward them for helping catapult Windows Phone onto equal footing with iOS and Android.
    Most of all I wish Microsoft would go back to being a technology company, with a focus on cool, exciting technology, with a leader that appreciates, uses, and understands how exciting technology can be.
    Steve Jones

  • The Vacation Struggle

    poolIt’s a little over halfway through the year and once again I’m struggling to get away from work and get through my vacation. It’s not that my boss won’t give me time off, which is a common complaints from many workers in the technology industry. Instead it’s my fault. I’ve got a lot of ongoing work to get done, various commitments for events, preparation for travel, and most of all, I enjoy my job. I’ll add that a few family events have prevented us from executing on vacation plans along the way as well.

    Skipping vacation is not the best way to go through your career, and during the last month I’ve stopped to take stock of the situation and do something about it. I have a generous vacation allowance and there’s no need to hoard it, saving for a once-a-year-two-week trip. I have some family coming into town soon, and I booked a few days off while they are here. I’ve also extended one of my trips, planning on a mini-vacation with my daughter. I plan on saving some days to ski near the end of the year, but I’ll also be taking some long weekends and trying to recharge my interest in life, coming back to work refreshed.

    It can be hard to plan and take vacation, and I’m sure many of you have tips and tricks that you’ll share on how you get away from work and enjoy your life. Many of us see our careers as important, necessary, and hopefully fulfilling, but we also need breaks away from the stress and pressures of work.

    We should work in order to live, and enjoy, the rest of our lives. Time with family, friends, hobbies, and more is important. Life passes by quickly, and sometimes unexpectedly. One of the things I’ve learned as I age is that each day is precious, and that could end at any time. I seem to lose friends and acquaintances  all too frequently. All too often I find people passing that are well below retirement age, which is sad, tragic, and a reminder that life is short.

    Take your vacation. Get away from work when you can, if for no other reason than to see what else in the world there is for you to experience.

    Steve Jones

    The Voice of the DBA Podcasts

    We publish three versions of the podcast each day for you to enjoy.