Raul Garcia's blog
Back to my personal blog
I am no longer part of the SQL Server team, but I still have a lot of passion for security and SQL...
Date: 12/05/2011
SQL Server Security team is starting a new blog
First of all, I am really sorry for not writing anything for quite a long time. The SQL Server...
Date: 11/29/2007
Link to MSDN forum discussion: "Yet another question on Application security.... "
I am adding a link to one of the MSDN SQL Server Security forum discussion regarding application...
Date: 07/13/2007
Dynamic SQL and digital signatures in SQL Server 2005
As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server...
Date: 05/09/2007
After a long delay, I am ready to start posting again
I know it has been quite some time since I added any new content, I sincerely apologize for that,...
Date: 05/09/2007
Dynamic SQL & SQL injection
I know there are a lot of papers that talk about dynamic SQL in more depth than what I am going to...
Date: 01/04/2007
Let's talk about Dynamic SQL (preamble)
I want to talk about how dynamic SQL is affected by the execution context, but as this is a huge and...
Date: 01/04/2007
Using a digital signature as a secondary identity to replace Cross database ownership chaining
In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access...
Date: 10/30/2006
Quick guide to DB users without logins in SQL Server 2005
SQL Server 2005 introduced a new SQL DB principal subtype that can be quite useful: a SQL user that...
Date: 07/03/2006
How to distribute digitally signed SQL modules
Digital signatures in SQL Server 2005 modules can be used to extend the privileges of the caller for...
Date: 05/29/2006
SQL Server 2005 –Encrypting data on existing applications
SQL Server 2005 encryption requires the application to be aware of it and to decrypt the data before...
Date: 05/04/2006
Link to Laurentiu's blog
I am including a link to Laurentiu Cristofor's blog: https://blogs.msdn.com/lcris. Laurentiu is one...
Date: 05/04/2006
Indexing encrypted data
Encrypted data and indexes One thing I have been asked many times is how to create an index on top...
Date: 03/12/2006