Dennes Torres in Other

Cloud Connections in Microsoft Fabric

I wrote about cloud connections when they were in a very early stage. Cloud connections evolved and are now sharable....

09 October 2024 4 min read

Other

Dennes Torres in Other

Workspace Identity and Resource Instance Rules: More than simple features

Sometimes, when a new feature is announced, it’s in fact hiding bigger changes on the entire environment. This is exactly...

22 May 2024 3 min read

Other

Dennes Torres in Other

Azure OpenAI and RAG Security

The most watched videos on my youtube channel are related to security. Azure SQL Networking Secrets and Cloud Security: Secure...

10 April 2024 3 min read

SQL Server

Ben Johnston in SQL Server

A practical introduction to Row-Level Security in SQL Server (complete guide, part one)

A practical introduction to Row-Level Security in SQL Server: how the predicate function and security policy work, testing, performance, hierarchies,...

01 August 2023 16 min read

Other

Dennes Torres in Other

.NET App Services: Containers or not containers, that’s the question

The app services in the title can be function apps, web apps or more. We can deploy the app services...

30 August 2022 5 min read

MySQL

Lukas Vileikis in MySQL

Security in MySQL: Part Two

There’s more to security in MySQL than user account privileges. In this article, Lukas Vileikis explains the other components of...

27 May 2022 10 min read

Other

Dennes Torres in Other

Azure and MFA Secrets

MFA and conditional access policies are powerful tools for our cloud security, but they are full of tricks. I don’t...

27 December 2021 3 min read

Other

Dennes Torres in Other

Dynamic Data Mask is now useful and no one noticed it

Dynamic data mask is a very interesting security feature allowing us to mask critical fields such as e-mail, phone number,...

22 November 2021 3 min read

SQL Server

Pamela Mooney in SQL Server

SQL Server security starter guide for DBAs: authentication, permissions, monitoring, and audit

Comprehensive SQL Server security guide for DBAs - covering physical and data-file security, patching, authentication (Windows vs SQL), server and...

08 October 2020 28 min read

Other

Louis Davidson in Other

Securing access to data for admin and dbo

In this blog, I want to explore what you can do to block the owner of a database from doing...

19 March 2018 11 min read

.NET

Dino Esposito in .NET

Revisiting Script Injection in ASP.NET

The danger of Cross-Site Scripting (XSS) has to be dealt with in any web application. You do this by validating...

05 July 2017 12 min read

T-SQL Programming

Robert Sheldon in T-SQL Programming

Encrypting SQL Server: Using an Encryption Hierarchy to Protect Column Data

SQL Server Encryption is an essential part of what is required for protecting data. Column-level encryption can be a very...

13 December 2016 15 min read

Database DevOps

William Brewer in Database DevOps

Questions About SQL Server Security and Access Control You Were Too Shy to Ask

For many developers, database security and Access control is just something that gets in the way of development work. However,...

04 November 2016 23 min read

Robert Sheldon

The Logical Data Warehouse – Towards a Single View of All the Data

What is wrong with the Enterprise Data Warehouse? Quite a lot, it seems. By taking the narrow view that the...

09 November 2015 14 min read

Tom Fischer

Safe(r) Custom User-Authentication

If you are still storing passwords with MD5 hashing you're doing it wrong. The .NET platform provides a Cryptography library...

12 June 2015 16 min read

Robert Sheldon

How to Get SQL Server Security Horribly Wrong

It is no good doing some or most of the aspects of SQL Server security right. You have to get...

29 April 2015 24 min read

Phil Factor

Schema-Based Access Control for SQL Server Databases

Access-control within the database is important for the security of data, but it should be simple to implement. It is...

09 April 2015 25 min read

Nick Harrison

ASP.NET MVC Security through Validation

ASP.NET MVC provides a way of providing declarative validation of user inputs. It removes a lot of the tedium of...

20 January 2015 13 min read

Joshua Feierman

The Mindset of the Enterprise DBA: Delegating Work

A lot of the routine jobs demanded of a DBA can be automated, but a tougher prospect is to automate...

17 October 2014 19 min read

David Njoku

Introduction to Oracle Password Verification and Complexity Function

Security is in the news again. It seems there’s no greater click-bait than a story about indecent photos of beautiful...

16 September 2014 5 min read