| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft to build great wall of Yukon | |
|
||
| Time: 00:00 EST/05:00 GMT | News Source: CNET | Posted By: Robert Stein | ||
|
Microsoft is aiming to shore up the security of its SQL Server database management software. The next version of SQL Server, code-named "Yukon," will include a long list of new security-related features when it debuts in 2003, said James Hamilton, SQL Server's design architect. He said that Microsoft's database team spent more than a month auditing the software code for security holes. Yukon will include the ability to more easily add security fixes, Hamilton said. Previously, database administrators had to install patches one at a time, a several-step process in which mistakes could be made, he added. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 156 Last | Next |
The time now is
8:28:16 PM
ET.
Any comment problems? E-mail us |
| #1 By 3339 (65.198.47.10) at 9/11/2002 12:53:52 PM |
| No, I certainly don't--I wholeheartdly agree. Maybe the thing to do is start a pool--like picking a date of birth kinda thing... How many days after release does the first securiy vuln. pop up? I pick 50 days after release. |
| #2 By 61 (65.32.170.1) at 9/11/2002 4:29:25 PM |
| Oh yay, Soda is back, along with all the new mindless trolls. |
| #3 By 6253 (12.237.219.240) at 9/11/2002 8:05:31 PM |
|
I don't think it will be that bad. What we've seen lately has been a reaction to the first SQL Server worms and the first major security review of MSSQL code. Basic SQL injection vulnerabilities have been widely known, the fact that tcp port 1433 is open all over the Internet has been widely known, the fact that enumeration of server roles can be done with guest access has been widely known, and the fact that certain system stored procedures (e.g. xp_cmdshell, xp_sendmail, xp_OACreate) were sitting ducks has been obvious to most professional DBAs. It's just that the SQL Server world had always been like a quiet little rural community where you could leave the front door unlocked without worry. Suddenly, we've done a complete 180-degree turn. Now we treat things like Service Pack setup logs (which no one can really get without access to the local file system) as gaping holes. By the end of the year, all the nits will have been picked and addressed in SQL7SP5 and SQL2KSP4, then Yukon can go to beta with the fixes baked in.
Windows seems like a never-ending stream mainly because Windows constantly grows so much and there is extensive interaction between subsystems. But SQL has always been a highly contained product. That's why the comprehensiveness of SQL Books Online is far greater than with the product docs of any other server product. The single biggest open door is the ability to use ActiveX Scripting in SQL Agent job steps and in DTS packages, but people aren't widely using those features, and they probably won't now that the CLR is coming in Yukon. |
| #4 By 1845 (12.254.162.111) at 9/11/2002 11:02:14 PM |
| Interesting analysis, holedup. I'm not sure that I'm that optimistic, but here's to hoping! |
|
Write Comment
Return to News |
Displaying 1 through 25 of 156 Last | Next |
The time now is
8:28:16 PM
ET.
Any comment problems? E-mail us |
