If you've read the IT press at all these days, you know that SQL Injection (SI) attacks are very common and can be devastatingly effective. In fact, SI attacks-equally easy to execute against Oracle, MySQL, IBM DB2, or Microsoft SQL Server-are among the most common hacks on the Internet today. If a web application runs a relational database on the backend, it can be subject to an SI attack, which ironically, is among the easiest web hacks to prevent. [READ MORE] … [Read more...]
DBTA: Is it Time for a Professional Code of Ethics for DBAs?
October 5, 2010 by 2 Comments
In my many years on the board of directors of the Professional Association for SQL Server (PASS), I frequently exhorted our members to strive for individual achievement and personal excellence. One of the best paths for many SQL Server professionals is through certification, especially if they lack years of demonstrated on-the-job experience. However, certification only paints half the picture. While it might demonstrate, at a minimum, that you passed a test (or several tests) about the database technology, it tells nothing about your standards for good conduct. [READ MORE] … [Read more...]
DBTA: The Trouble with Third-Party Applications
September 28, 2010 by Leave a Comment
Third-party applications are a very important part of the IT landscape. Many of us have faced the common dilemma of trying to decide whether to build or buy that next important application our organizations need. (By the way, I'm talking about smaller, specialized applications like an inventory management system for the company warehouse, or a practice management system for a doctor's office. I'm not talking about the huge and incredibly sophisticated ERP systems like SAP and Oracle Financials.) [READ MORE] … [Read more...]
DBTA: SQL Server in the Clouds?
September 21, 2010 by Leave a Comment
The idea of "SQL Server in the cloud" is all the rage as I write this article. Many SQL Server experts already predict the demise of the IT data center and a complete upending of the current state of our industry, in which large enterprises can spend millions of dollars on SQL Server licenses, hardware and staff. I have to admit, when I first heard about this idea, I was ecstatic. What could be better for an enterprise than to have all the goodness of a SQL Server database with none of the hardware or staffing issues? However, on deeper examination, there is much about which to be cautious. … [Read more...]
