Admin Rights for Everyone
Steve thinks administrator rights for too many people is a bad idea, but even when it's a limited group, he recommends some sort of governance.
2026-08-26
254 reads
Security
Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles
Learn how you can enable map your security roles in Aurora PostgreSQL to AD groups using Kerberos.
2026-08-26
1,260 reads
The “Successful Login” Dilemma: Why Your Login Auditing Strategy Might Be Hurting Your Server
From bloated error logs to risky logon triggers, a guide to auditing connections without killing performance.
2026-07-29
2,552 reads
A Security and AI Fail
Security is an important consideration for anyone working with data, but it's especially a concern with AI.
2026-07-15
172 reads
The New Wave of Security Threats
New AI tools are discovering older vulnerabilities in software, as well as new ones. Get ready for a bunch of patches to come out.
2026-05-09
170 reads
Securing Your Databases in 2026: Best Practices for the Evolving Threat Landscape
In 2026, your approach to both applications and databases must be focused on practical and technical real-world operations and use cases rather than just hype.
2026-02-16
Exploiting SQL Server Date Correlation Optimization: How Tampered Backups Enable Cross-Database Data Leaks
This article reveals a critical SQL Server flaw: attackers can weaponize Date Correlation Optimization (DCO) views in restored backups
2026-02-13
No Defaults Passwords Ever
Steve doesn't see a reason why we should have default passwords on systems ever.
2026-01-17
121 reads
Minimally Viable Security
Today Steve talks about the need for a basic level of security in our software.
2026-01-05
134 reads
SQL Server DBaaS Vulnerability: Decrypting System Code & Exfiltrating User Data
Security in cloud environments is both challenging and fascinating, particularly for Database-as-a-Service (DBaaS) offerings like Amazon RDS, GCP CloudSQL and Alibaba ApsaraDB RDS. The cloud vendor acts as the system administrator, managing the operating system, patching, and backups, while the user manages their data and databases.
2025-12-03
Blogs
The SUM of Nothing: #SQLNewBlogger
By Steve Jones
I caught this interesting item over on Pinal Dave’s blog: Eleven Interview Questions that...
How to Move the SSMS Status Bar to the Top and Color-Code SQL Server Connections
By Hemantgiri
I use color-coded connections in SSMS to distinguish Production, Pre-Production, UAT, and Development. But...
Forums
Building a SQL Server Fleet Audit That Leadership Actually Reads
Comments posted to this topic are about the item Building a SQL Server Fleet...
Smart AI Agents and Data Security
Comments posted to this topic are about the item Smart AI Agents and Data...
RegEx Functions IV
Comments posted to this topic are about the item RegEx Functions IV
Question of the Day
RegEx Functions IV
I have this data in a table in a SQL Server 2025 database:
EmailAddressID EmailAddress 7 [email protected] 8 [email protected]If I run this query, which row(s) are returned?
SELECT top 10 * FROM person.EmailAddress WHERE REGEXP_LIKE(EmailAddress, '^D', 'i') AND BusinessEntityID IN (7,8)See possible answers