Magnolia Noise Get The Noise

ryu77
January 20th, 2012 - 08:58

Perhaps I am using the incorrect search terms, but I have not been able to find a good explanation of this. LONG VERSION: What are the security concerns of adding a Login of DOMAINMACHINENAME$ to a database in SQL server? At first glance it seems good because you don’t store login credentials in the web.config (yes I know you can encrypt them) and it also seems to streamline login management in that you don’t have to add a new login for every difference type of permissions or for each database having it’s own unique information. Things I realize off the bat is: You can’t restrict permissions by user so someone could try some SQL injection and you aren’t protected against this at all. This is somewhat countered by the fact, in my instance at least, that most ORMs (including the one I use) parametrize things automatically to prevent that and [...]

oneview.com | new tags: &quote;
March 15th, 2012 - 21:55

RT rel=”nofollow” Interesting: Mysterious deaths of BP Oil Spill Whistleblowers.