#mssqlserver — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #mssqlserver, aggregated by home.social.
-
Включаем EPA в FreeTDS и go-mssqldb: приключение на 5 минут
Представьте: вы теряете контроль над SCCM — одним из самых критичных инструментов управления инфраструктурой. А точкой входа становится обычное подключение к MSSQL, где он хранит свои данные. Злоумышленник перехватывает NTLM-аутентификацию и перенаправляет её на нужный сервер — так работает NTLM relay. Мы в команде Security Engineering решили не ждать эксплуатации этой уязвимости. Меня зовут Булат Гафуров, я инженер по информационной безопасности в Яндексе. В этой статье я расскажу, почему стандартного решения оказалось недостаточно и как мы добавили поддержку механизма EPA в популярные библиотеки, чтобы переключить защиту на стороне MSSQL в режим Require, не лишив Linux- и Windows-сервисы доступа к данным.
https://habr.com/ru/companies/yandex/articles/1031368/
#windows #security #ntlm_relay #ntlm #ntlmrelay #epa #mssql #mssqlserver #microsoft #freetds
-
Включаем EPA в FreeTDS и go-mssqldb: приключение на 5 минут
Представьте: вы теряете контроль над SCCM — одним из самых критичных инструментов управления инфраструктурой. А точкой входа становится обычное подключение к MSSQL, где он хранит свои данные. Злоумышленник перехватывает NTLM-аутентификацию и перенаправляет её на нужный сервер — так работает NTLM relay. Мы в команде Security Engineering решили не ждать эксплуатации этой уязвимости. Меня зовут Булат Гафуров, я инженер по информационной безопасности в Яндексе. В этой статье я расскажу, почему стандартного решения оказалось недостаточно и как мы добавили поддержку механизма EPA в популярные библиотеки, чтобы переключить защиту на стороне MSSQL в режим Require, не лишив Linux- и Windows-сервисы доступа к данным.
https://habr.com/ru/companies/yandex/articles/1031368/
#windows #security #ntlm_relay #ntlm #ntlmrelay #epa #mssql #mssqlserver #microsoft #freetds
-
Включаем EPA в FreeTDS и go-mssqldb: приключение на 5 минут
Представьте: вы теряете контроль над SCCM — одним из самых критичных инструментов управления инфраструктурой. А точкой входа становится обычное подключение к MSSQL, где он хранит свои данные. Злоумышленник перехватывает NTLM-аутентификацию и перенаправляет её на нужный сервер — так работает NTLM relay. Мы в команде Security Engineering решили не ждать эксплуатации этой уязвимости. Меня зовут Булат Гафуров, я инженер по информационной безопасности в Яндексе. В этой статье я расскажу, почему стандартного решения оказалось недостаточно и как мы добавили поддержку механизма EPA в популярные библиотеки, чтобы переключить защиту на стороне MSSQL в режим Require, не лишив Linux- и Windows-сервисы доступа к данным.
https://habr.com/ru/companies/yandex/articles/1031368/
#windows #security #ntlm_relay #ntlm #ntlmrelay #epa #mssql #mssqlserver #microsoft #freetds
-
Включаем EPA в FreeTDS и go-mssqldb: приключение на 5 минут
Представьте: вы теряете контроль над SCCM — одним из самых критичных инструментов управления инфраструктурой. А точкой входа становится обычное подключение к MSSQL, где он хранит свои данные. Злоумышленник перехватывает NTLM-аутентификацию и перенаправляет её на нужный сервер — так работает NTLM relay. Мы в команде Security Engineering решили не ждать эксплуатации этой уязвимости. Меня зовут Булат Гафуров, я инженер по информационной безопасности в Яндексе. В этой статье я расскажу, почему стандартного решения оказалось недостаточно и как мы добавили поддержку механизма EPA в популярные библиотеки, чтобы переключить защиту на стороне MSSQL в режим Require, не лишив Linux- и Windows-сервисы доступа к данным.
https://habr.com/ru/companies/yandex/articles/1031368/
#windows #security #ntlm_relay #ntlm #ntlmrelay #epa #mssql #mssqlserver #microsoft #freetds
-
Blog post from the past:
In which I go over potential reasons for why some special characters end up corrupted and displayed as question marks, squares or something completely different in SQL Server.
https://vladdba.com/2024/10/04/characters-question-marks-squares-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I go over potential reasons for why some special characters end up corrupted and displayed as question marks, squares or something completely different in SQL Server.
https://vladdba.com/2024/10/04/characters-question-marks-squares-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
New blog post:
My guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.
https://vladdba.com/2026/04/23/test-sql-server-backups-schrodingers-backups/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #azure -
New blog post:
My guideline on how to handle and test SQL Server backups to ensure their viability and avoid a "Schrödinger's backup" scenario.
https://vladdba.com/2026/04/23/test-sql-server-backups-schrodingers-backups/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #azure -
Recently updated post:
In which I discuss the risks of improperly configured SQL Server linked server connections and provide recommendations for securing them.
Now with a query to identify improperly configured linked server connections.
https://vladdba.com/2023/07/10/securing-sql-server-linked-servers/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #security -
Recently updated post:
In which I discuss the risks of improperly configured SQL Server linked server connections and provide recommendations for securing them.
Now with a query to identify improperly configured linked server connections.
https://vladdba.com/2023/07/10/securing-sql-server-linked-servers/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #security -
New blog post:
In which I go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
https://vladdba.com/2026/04/15/dynamic-t-sql-sql-injection-quotename-executesql/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I go over three points that are vital in preventing SQL injection when working with dynamic T-SQL.
https://vladdba.com/2026/04/15/dynamic-t-sql-sql-injection-quotename-executesql/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
My second contribution to T-SQL Tuesday, about a session that got me interested into the security side of things.
https://vladdba.com/2026/04/14/t-sql-tuesday-197-impactful-session-dba-career/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday -
New blog post:
My second contribution to T-SQL Tuesday, about a session that got me interested into the security side of things.
https://vladdba.com/2026/04/14/t-sql-tuesday-197-impactful-session-dba-career/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday -
New blog post:
In which I provide some examples as to why FLOAT isn’t the best option for storing exact financial data in SQL Server.
https://vladdba.com/2026/04/11/stop-using-float-for-financial-data-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I provide some examples as to why FLOAT isn’t the best option for storing exact financial data in SQL Server.
https://vladdba.com/2026/04/11/stop-using-float-for-financial-data-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
Blog post from the past:
In which I demo two PoCs for SQL injection vulnerabilities fixed in SQL Server 2022 CU20 GDR KB5063814
https://vladdba.com/2025/08/29/poc-sql-injection-sql-server-2022-cu20-gdr-kb5063814/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
Blog post from the past:
In which I demo two PoCs for SQL injection vulnerabilities fixed in SQL Server 2022 CU20 GDR KB5063814
https://vladdba.com/2025/08/29/poc-sql-injection-sql-server-2022-cu20-gdr-kb5063814/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
I've noticed today that Microsoft Bing Webmaster Tools has a new "AI Performance" tab.
Apparently, my SSMS 22 config blog post has been cited by "Microsoft Copilots and Partners" a total of 284.7K times since I've published it ~6 months ago. Pretty neat, although this doesn't really translate into visits.Link to blog post: https://vladdba.com/2025/11/16/my-sql-server-management-studio-22-configuration/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
-
I've noticed today that Microsoft Bing Webmaster Tools has a new "AI Performance" tab.
Apparently, my SSMS 22 config blog post has been cited by "Microsoft Copilots and Partners" a total of 284.7K times since I've published it ~6 months ago. Pretty neat, although this doesn't really translate into visits.Link to blog post: https://vladdba.com/2025/11/16/my-sql-server-management-studio-22-configuration/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql
-
Why does #MSSQLServer allow table indexes that have no name? How are they created? What is their use?
-
New blog post:
In which I cover where to find the 4 new export formats in SSMS 22.4.1 and one gotcha you need to be mindful of.
https://vladdba.com/2026/03/20/ssms-export-result-excel-json-markdown-xml/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover where to find the 4 new export formats in SSMS 22.4.1 and one gotcha you need to be mindful of.
https://vladdba.com/2026/03/20/ssms-export-result-excel-json-markdown-xml/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
Blog post from the past:
In which I explore the impact of SQL Server 2025’s #PBKDF2 hashing algorithm on password cracking and compare it with SQL Server 2022
https://vladdba.com/2025/06/23/looking-into-sql-server-2025s-new-pbkdf2-hashing-algorithm/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I explore the impact of SQL Server 2025’s #PBKDF2 hashing algorithm on password cracking and compare it with SQL Server 2022
https://vladdba.com/2025/06/23/looking-into-sql-server-2025s-new-pbkdf2-hashing-algorithm/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I cover ANSI_NULLS and QUOTED_IDENTIFIER, two potentially dangerous SET options that stored procedures inherit from your session when created.
https://vladdba.com/2025/03/03/dangerous-set-options-stored-procedures/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I cover ANSI_NULLS and QUOTED_IDENTIFIER, two potentially dangerous SET options that stored procedures inherit from your session when created.
https://vladdba.com/2025/03/03/dangerous-set-options-stored-procedures/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
New blog post:
Outlining the process of changing the edition of a SQL Server instance on Linux
https://vladdba.com/2026/02/03/change-edition-sql-server-linux/
#linux #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
Outlining the process of changing the edition of a SQL Server instance on Linux
https://vladdba.com/2026/02/03/change-edition-sql-server-linux/
#linux #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
Outlining the process of changing the edition of a SQL Server instance on Linux
https://vladdba.com/2026/02/03/change-edition-sql-server-linux/
#linux #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover the process of setting up SQL Server 2025 on Ubuntu 24.04, connecting and restoring a sample database.
https://vladdba.com/2026/02/02/sql-server-2025-ubuntu-24-04/
#linux #ubuntu #virtualbox #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover the process of setting up SQL Server 2025 on Ubuntu 24.04, connecting and restoring a sample database.
https://vladdba.com/2026/02/02/sql-server-2025-ubuntu-24-04/
#linux #ubuntu #virtualbox #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover the process of setting up SQL Server 2025 on Ubuntu 24.04, connecting and restoring a sample database.
https://vladdba.com/2026/02/02/sql-server-2025-ubuntu-24-04/
#linux #ubuntu #virtualbox #sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
My first ever contribution to T-SQL Tuesday.
https://vladdba.com/2026/01/20/t-sql-tuesday-194-learning-from-mistakes/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday -
New blog post:
My first ever contribution to T-SQL Tuesday.
https://vladdba.com/2026/01/20/t-sql-tuesday-194-learning-from-mistakes/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday -
New blog post:
My first ever contribution to T-SQL Tuesday.
https://vladdba.com/2026/01/20/t-sql-tuesday-194-learning-from-mistakes/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql #tsql2sday -
Blog post from the past:
In which I cover ways of speeding up SELECT COUNT in SQL Server as well as some myths about best practices when it comes to SELECT COUNT.
https://vladdba.com/2023/08/21/speeding-up-select-count-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I cover ways of speeding up SELECT COUNT in SQL Server as well as some myths about best practices when it comes to SELECT COUNT.
https://vladdba.com/2023/08/21/speeding-up-select-count-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
New blog post:
In which I cover some unpleasant side-effects of using heaps in SQL Server for anything else than staging tables.
https://vladdba.com/2025/12/30/the-hidden-costs-of-heaps-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover some unpleasant side-effects of using heaps in SQL Server for anything else than staging tables.
https://vladdba.com/2025/12/30/the-hidden-costs-of-heaps-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover some unpleasant side-effects of using heaps in SQL Server for anything else than staging tables.
https://vladdba.com/2025/12/30/the-hidden-costs-of-heaps-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
My most popular blog posts in 2025 by views, likes, and comments.
https://vladdba.com/2025/12/27/most-popular-blog-posts-in-2025/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
My most popular blog posts in 2025 by views, likes, and comments.
https://vladdba.com/2025/12/27/most-popular-blog-posts-in-2025/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
My most popular blog posts in 2025 by views, likes, and comments.
https://vladdba.com/2025/12/27/most-popular-blog-posts-in-2025/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
Blog post from the past:
In which I demo how to import and query HTML table data in SQL Server using only T-SQL.
https://vladdba.com/2023/11/03/import-and-query-html-table-data-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
Blog post from the past:
In which I demo how to import and query HTML table data in SQL Server using only T-SQL.
https://vladdba.com/2023/11/03/import-and-query-html-table-data-in-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba -
New blog post:
In which I cover a sometimes overlooked gotcha when using page compression on heaps.
https://vladdba.com/2025/12/09/page-compression-heaps-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover a sometimes overlooked gotcha when using page compression on heaps.
https://vladdba.com/2025/12/09/page-compression-heaps-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
New blog post:
In which I cover a sometimes overlooked gotcha when using page compression on heaps.
https://vladdba.com/2025/12/09/page-compression-heaps-sql-server/
#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #sql -
BobSQL
Based on tsqlparser, tgpiler, and dxp
https://github.com/ha1tch/tgpiler
https://github.com/ha1tch/tsqlparser
All the pieces are there, so why not?
#tsql #bobsql #database #db #foss #golang #sql #microsoft #mssql #mssqlserver #sqlite #postgres