Admin Rights for Everyone
Steve thinks administrator rights for too many people is a bad idea, but even when it's a limited group, he recommends some sort of governance.
2026-08-26
246 reads
Security
Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles
Learn how you can enable map your security roles in Aurora PostgreSQL to AD groups using Kerberos.
2026-08-26
1,252 reads
The “Successful Login” Dilemma: Why Your Login Auditing Strategy Might Be Hurting Your Server
From bloated error logs to risky logon triggers, a guide to auditing connections without killing performance.
2026-07-29
2,528 reads
A Security and AI Fail
Security is an important consideration for anyone working with data, but it's especially a concern with AI.
2026-07-15
165 reads
The New Wave of Security Threats
New AI tools are discovering older vulnerabilities in software, as well as new ones. Get ready for a bunch of patches to come out.
2026-05-09
166 reads
Securing Your Databases in 2026: Best Practices for the Evolving Threat Landscape
In 2026, your approach to both applications and databases must be focused on practical and technical real-world operations and use cases rather than just hype.
2026-02-16
Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks
This article reveals a critical SQL Server flaw: attackers can weaponize Date Correlation Optimization (DCO) views in restored backups
2026-02-13
No Defaults Passwords Ever
Steve doesn't see a reason why we should have default passwords on systems ever.
2026-01-17
116 reads
Minimally Viable Security
Today Steve talks about the need for a basic level of security in our software.
2026-01-05
128 reads
SQL Server DBaaS Vulnerability: Decrypting System Code & Exfiltrating User Data
Security in cloud environments is both challenging and fascinating, particularly for Database-as-a-Service (DBaaS) offerings like Amazon RDS, GCP CloudSQL and Alibaba ApsaraDB RDS. The cloud vendor acts as the system administrator, managing the operating system, patching, and backups, while the user manages their data and databases.
2025-12-03
Blogs
The Book of Redgate:A Prehistory
By Steve Jones
I’ve covered the values in a number of previous posts on the Book of...
Evidence-bound: what AgentDBA will and won’t link
By Arun Sirpal
When the evidence names the database, it says so. When it doesn’t, it stops....
Prep data for AI vs. Fabric Data Agent Instructions: What Goes Where?
By James Serra
Making Data AI-Ready, Part 3 (This is the final article in a three-part series...
Forums
Four Rules for Adding AI Without Breaking What Already Works
Comments posted to this topic are about the item Four Rules for Adding AI...
SQL Server 2025 section missing?
Hello, the title says it all. Is the SQL Server 2025 section missing?
A design question in a parent child relationship
I am not sure which is the best way to proceed. I have parent...
Question of the Day
Hyperscale Replicas III
In an Azure SQL Database Hyperscale Edition, how many named replicas can be configured?
See possible answers