Admin Rights for Everyone
Steve thinks administrator rights for too many people is a bad idea, but even when it's a limited group, he recommends some sort of governance.
2026-08-26
257 reads
Security
Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles
Learn how you can enable map your security roles in Aurora PostgreSQL to AD groups using Kerberos.
2026-08-26
1,280 reads
The “Successful Login” Dilemma: Why Your Login Auditing Strategy Might Be Hurting Your Server
From bloated error logs to risky logon triggers, a guide to auditing connections without killing performance.
2026-07-29
2,627 reads
A Security and AI Fail
Security is an important consideration for anyone working with data, but it's especially a concern with AI.
2026-07-15
176 reads
The New Wave of Security Threats
New AI tools are discovering older vulnerabilities in software, as well as new ones. Get ready for a bunch of patches to come out.
2026-05-09
173 reads
Securing Your Databases in 2026: Best Practices for the Evolving Threat Landscape
In 2026, your approach to both applications and databases must be focused on practical and technical real-world operations and use cases rather than just hype.
2026-02-16
Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks
This article reveals a critical SQL Server flaw: attackers can weaponize Date Correlation Optimization (DCO) views in restored backups
2026-02-13
No Defaults Passwords Ever
Steve doesn't see a reason why we should have default passwords on systems ever.
2026-01-17
126 reads
Minimally Viable Security
Today Steve talks about the need for a basic level of security in our software.
2026-01-05
141 reads
SQL Server DBaaS Vulnerability: Decrypting System Code & Exfiltrating User Data
Security in cloud environments is both challenging and fascinating, particularly for Database-as-a-Service (DBaaS) offerings like Amazon RDS, GCP CloudSQL and Alibaba ApsaraDB RDS. The cloud vendor acts as the system administrator, managing the operating system, patching, and backups, while the user manages their data and databases.
2025-12-03
Blogs
T-SQL Tuesday #203: Risk and Reward
By Steve Jones
This is timely, as I’m currently on a boat in the Adriatic taking a...
dataMinds Connect 2026 – Slides & Scripts
You can find the slides and SQL scripts for my session “Spice up your...
How to Clear the SSMS Cache (SSMS 21 and Later)
By SQLPals
How to Clear the SSMS Cache (SSMS 21 and Later) Updated...
Forums
Risk Vs Reward, The never ending ROI discussion.
Comments posted to this topic are about the item Risk Vs Reward, The never...
Trigger isn't working
Hi, I have a trigger, that works fine elsewhere but is not working at...
Question of the Day
Hyperscale Replicas IV
In Azure SQL Database Hyperscale Edition, how many geo-replicas can be created?
See possible answers