Tag Archives: security

Cloud Concerns

When I get feedback about cloud computing from DBAs, the main concern seems to be data security, or the perception of problems with security from a cloud provider. That’s natural as sending your data to the cloud doesn’t necessarily remove … Continue reading

Posted in Editorial | Tagged , | Comments Off on Cloud Concerns

You Need to Manage Passwords

I saw a note this week from CNet about a system built to crack passwords (also on ArsTechnica). It reminded me of the story of the guy that cracked Googles DKIM key at 512bits. Not insignificant, until you get to … Continue reading

Posted in Blog | Tagged , | 9 Comments

Regulators, Mount Up

I have an encryption talk that I give and usually find a few people in the audience that have implemented encryption. In almost every case this has been because of PCI or HIPAA regulations that dramatically reduce penalties if data is encrypted. … Continue reading

Posted in Editorial | Tagged , , | Comments Off on Regulators, Mount Up

How Application Roles Work in SQL Server

One very interesting security technique available in SQL Server is the application role. It’s an interesting way of applying security to a user, and perhaps a way of preventing users from accessing data with unauthorized applications. An application role is … Continue reading

Posted in Blog | Tagged , | 4 Comments