New answers tagged security
1
Yes, patch. I am right now working on a plan to patch 100s of servers in our dev and production environments. Even if you believe your network is impenetrable, there is no harm in being prepared, except the cost of doing so. The cost of being wrong is far, far higher. There aren't a lot of details about the specifics of the exploit because, until everyone is ...
1
If you look at the metrics Microsoft uses from an independent system (First.org) the Base Score is High with an 8 while the Temporal Score is relatively low with a 3. So in terms of how critical of an issue it is, it is rather important to patch, and the fix is relatively confident of a fix to the vulnerability.
Also important to note the Attack Vector is &...
1
It is critical; my customers are testing it in their dev/test/quality environments.
They will install it for sure in a few days.
The exploit is not public, and given the security risk – attackers own the server – I wouldn’t expect them to reveal it publicly anytime soon. It takes forever to get folks patched.
0
The answer to your question is in the result of following code:
execute as user = 'your_user'
select *
from sys.user_token
where principal_id <> USER_ID()
revert
Please update your question with the result where 'your_user' is problematic user
1
these are the standard permission:
for this mapped user settings:
you have in place some kind of deny for your users.
10
In my experience, the root cause of these symptoms is most commonly a race condition in the application and/or T-SQL code rather than data corruption due to hardware, network, or malicious activity. Race conditions are insidious because the undesired outcome occurs by happenstance, difficult to reproduce, and may rarely occur.
One must use transactions, ...
5
Is it possible to edit the data file while the SQL Server instance is stopped: definitely, the page layout and formats are well enough documented. Sounds unlikely though, if someone has access to do this deliberately they likely have access to much easier ways to affect the data.
Is it possible to affect a backup this way: yes. A plain backup is essentially ...
0
Is there a possibility som Mercury-level genius exists that could do that? Maybe.
Is there a possibility i could win jackpot 10 ttimes in row? Yes, and its more likely then your scenario.
Could it be done by other software? Yes.
Is it possible there was a communication or server error? Unlikely.
0
User: ABC with password aBc is not a match!
It is an easy and exploitable password, but no different than abc123 in terms of security, and not the same as the UserID !
ABC and aBc generate a different ASCCI code, different MD5 code etc
To answer the question in context, there are some "sec_" parameters to assist us in that category.
If the ...
Top 50 recent answers are included
