Microsoft SQL Server stats

http://blogs.sqlsentry.com/loriedwards/statistics-1/

http://sqlblog.com/blogs/kalen_delaney/archive/2013/01/18/accessing-distribution-statistics.aspx

Microsoft SQL Server stats

Advertisements

Microsoft SQL Server Licensing Simplified into 7 Rules

http://www.brentozar.com/archive/2015/04/microsoft-sql-server-licensing-simplified-into-7-rules/?utm_content=buffer5387c&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer

Microsoft SQL Server Licensing Simplified into 7 Rules


Brent Ozar starting a company

http://ozar.me/2015/04/company-startup-thing-worked-year-3/?utm_content=buffer979de&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer


SAN Performance on the Cloud

http://sqlblog.com/blogs/joe_chang/archive/2015/04/20/transaction-io-performance-on-violin.aspx?utm_content=buffere4cca&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer

Seperate data from log, not 1 pool as cloud vendors provide


SAP Login Security Flaw

http://www.doblerconsulting.com/db-tech-trends/sap-patches-login-security-flaw-in-ase-database/ SAP Patches Login Security Flaw in ASE Database http://www.pcworld.com/article/2914532/sap-patches-login-flaw-in-ase-database.html SAP patches login flaw in ASE database

SAP patched a flaw on Thursday that could allow an attacker to take complete control over a database, according to security vendor Trustwave. The flaw (CVE-2014-6284) affects SAP’s Adaptive Server Enterprise (ASE), a relational database for Unix, Linux and Windows systems, designed for high volumes of data-rich transactions. Vulnerable versions are 12.5, 15, 15.5, 15.7 and 16. TrustWave’s Martin Rakhmanov, a senior security researcher, found an error in the challenge and response mechanism used to access ASE. The account access gained is not a privileged account, but TrustWave said other flaws allow the privileges to be escalated to that of a database administrator. “Combined with such privilege elevation vulnerabilities, this one allows complete takeover of the database server,” TrustWave said in its advisory. Trustwave published proof-of-concept code on GitHub. SAP has also released a security note, but login details are required to view it.

“SAP ASE ships with a login named “probe” used for the two-phase commit probe process, which uses a challenge and response mechanism to access Adaptive Server. There is a flaw in implementation of the challenge and response mechanism that allows anyone to access the server as “probe” login. While the “probe” is not a privileged account, other flaws exist that allow privilege elevation from regular database user to database administrator. Combined with such privilege elevation vulnerabilities this one allows complete takeover of the database server.”

https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-6284—-Probe–login-access-vulnerability-in-SAP-ASE/?page=1&year=0&month=0

Fixed are:

ASE 15.7 SP132
ASE 16.0 SP01


How to ask IT questions on the internet.

http://spaghettidba.com/2015/04/24/how-to-post-a-t-sql-question-on-a-public-forum/

How to post a T-SQL question on a public forum

http://www.catb.org/esr/faqs/smart-questions.html

How To Ask Questions The Smart Way


Informix Chat with Lab

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Informix%20Chat%20With%20the%20Lab

Informix Chat with the Lab