Excitement
Posted : Friday August 8th, 2008

So... it's been kind of an interesting time lately. Some servers that I am looking after as the usual admin is away on vacation were hacked. There was both a SQL injection attack against a website and there was a direct attack of the back end database as well.

Some code patching and a firewall helped. Not sure why the firewall wasn't already in place...

I do find SQL server's security options both complex and limited.

Tags

firewall  hacking  work 

Categories

Security  Personal 

Comments

silky - Aug 9th 2008 1:15 AM
 
I'm fairly sure, that least in sql2k5, "schema's" are where it's at for 'role-based' style security. can't say i feel like caring too much about it though.

but it's probably worth considering.

Max - Aug 13th 2008 3:52 AM
 
I guess what I find is that as per usual with Microsoft the security model is complex and generally useless.

A Windows admin once remarked to me (back in the NT 4 days) that most of the admin features in NT server seemed to be solely designed to give admins a variety of methods to torture users.

I think he was on to something.