Browse the archive
Question I am trying to establish whether SQL Server is affected by the recently discovered OpenSSL vulnerabilities. For example, are SQL Servers that are using TLS/Certificates to encrypt connections between client and server affected to? I believe SQL …
Continue readingQuestion Apologies in advance if I don't use some terminology correctly here. I'm not a DBA but I've been temporarily forced into the role. I've inherited an application that runs on SQL Server 2016 Enterprise - one instance for PROD and another for TEST. …
Continue readingReplace sp_hexadecimal and sp_help_revlogin with a more maintainable way to script SQL Server logins.
Continue readingQuestion i am running sql server 2019 on Linux box and trying to connect using a Windows server 2016 client, how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level. TIA. Asked2020-09-25byRafay Pervaiz Answer TLDR You don't.
Continue readingQuestion A couple years ago we ran into a situation where we were changing the database owner from a DBA's login to sa, and immediately thereafter we received a complaint that the service login (which was NOT the DBA's login) no longer had access to the …
Continue readingMicrosoft docs defines the dbcreator role as: Members of the dbcreator fixed server role can create, alter, drop, and restore any database. But what specific permissions are actually included in that role? If we scroll down in the docs just a little, we’ll …
Continue readingTest SQL Server permissions as another user without knowing or resetting that person’s password.
Continue readingThe latest malware to make the headlines is really interesting to me. It’s a ransomware worm called Petya. Ransomware is particularly interesting to me as a DBA, because DBAs are responsible for keeping data safe, and ransomware is specifically designed to …
Continue readingQuestion Let's imagine a stored procedure that retreives data and do some kind of pagination. This procedure has some inputs describing which set of data we want and how we sort it. Here is a very simple query, but let's take it as an example.
Continue readingAaron Bertrand (twitter|blog) recently blogged asking for help to fix a big security loophole. I read the post then, but it was only this morning that I finally got around to REALLY looking at it, thinking about it, and testing it out for myself. Aaron can do …
Continue reading
