Voice of the DBA

Category: Editorial

  • Data and Privacy

    Privacy issues definitely apply for logging and debugging code.

    Recently there’s been quite an outcry over Carrier IQ’s software, which is on many smartphones and allows keystroke logging and capture of almost anything you do on your phone and transmit. Google’s Eric Schmidt condemned the use of the software, and there are numerous lawsuits being filed.

    Whether you think this software is legitimate or Carrier IQ and the carriers had the right to deploy it, you should be aware that from a public perspective this is a failure of software. It seems as though a back door of sorts, a spy program has been developed and approved by companies that sell cellular phone services, and it is a poor reflection of their business.

    I see legitimate uses for this software. It could be incredibly useful in debugging software and finding issues. If it’s enabled and captured by the end user. Having the vendor capable of accessing this information, however, is a very bad decision. It’s the equivalent of Microsoft being able to turn on trace or extended events on your instance and have all that data sent back to them in near real time.

    Many of us develop software, and we need to implement logging, and diagnostic functions that enable us to track down issues. However we ought to respect the privacy and potential perception of our customers and limit the ways in which we implement these features. We should design the functions to allow for a reasonable expectation of privacy when appropriate, and we should fully disclose how and when we are collecting data in the application.

    The other great lesson to take from this is the way we handle potential issues if they arise. Carrier IQ could have done a much better job of working with those that had concerns if they had respected and discussed the concerns, rather than dismissing the issues and attacking the people that raised them. That’s a communication lesson we all could remember in any conflict at work.

    Steve Jones

    The Voice of the DBA Podcasts

  • Merry Christmas 2011

    Merry Christmas and Happy Holidays.

    The Voice of the DBA Podcasts

    Enjoy the blooper reel

  • All I want for Christmas

    It’s the Christmas holiday, and many of you might be already out celebrating and away from work this week. Today is usually a day off for many companies, with last minute preparations for the celebrations this weekend.

    Those of us working in IT are very lucky for the most part. We have good jobs, jobs that don’t require heavy physical exertions, we work in offices not in inclement weather, and we are paid well relative to many other professions.

    I’m not Santa Claus, but I’ll offer up a virtual knee for this holiday poll:

    What would you like to get for Christmas?

    I’m looking for anything technology related, for work, for fun, or for the family. It doesn’t even have to require electricity, but what fun gift would you like to get this year? Have some fun and dream a little, but not too much. Someone close to you might read your answer and actually pick out the gift for you if it’s affordable and reasonable.

    For me, there’s not much I want or need in the technology space, and I’m actually trying to reduce the amount of technology stuff I have and work “lighter” with less stuff. However the one thing that I don’t need, but I’d like, is an Airport Extreme router that I can mount in the kitchen, add a set of speakers, and plug in my iPhone for music while I cook.

    Steve Jones

    The Voice of the DBA Podcasts

  • Pride and Security

    Do you love your job? I do.

    The weakest link in most security schemes is the human. We know that there are regular breaches of trust by employees, mistakes made (fat fingers, misconfigurations and more), and supposed favors done by someone with trusted access that send data to criminals. Social engineering, in a variety of forms, preys on the trusting nature of most people to gain unauthorized access, and unfortunately, it often works.

    Part of social engineering is the inherent trust for others that most of us have. Part of it is the desire that most people have to help others. However I think a part of it is also the attitude that many workers have when they aren’t treated well. When employees don’t feel they are a part of the company family and just work for a paycheck, they are less vigilant or caring about safeguarding the digital assets, and sometimes physical assets, of the company.

    If you had more pride in your employer, wouldn’t you be a little more careful in caring for the company and its assets? I think most people would. I don’t have any data on this, but I bet that the companies where people take pride in their work are more secure. Employees probably know more about each other, and problem recognize a larger percentage of the company. Workers will be a little more observant and protective if they feel that the company is “theirs.”

    One of the best things management can do to raise the level of security at the company, and build a better organization, is to ensure they are creating an environment that people enjoy and take pride in. That comes from showing respect, consideration, and fair treatment of all employees. It’s not even that hard to do, just be a decent human that does what’s best for everyone in the company, not just for the CEO.

    Steve Jones

    The Voice of the DBA Podcasts