Category: Security Misconceptions

• Debunking Symmetric Key Recreate-Ability

  

  2014-07-18 - Cryptography, General, Security, Security Misconceptions

  Do you think you can recreate a symmetric key that is protected by a certificate, by just using that same certificate? You might be in for a big surprise…

  [more…]

• DENY vs. REVOKE – Part 1 – Are they just synonyms?

  

  2014-02-08 - DENY vs. REVOKE, General, Security, Security Misconceptions, Series

  DENY and REVOKE look very similar, they might just be the same. And indeed, when looking at a single security principal and a single securable in isolation that are functionally identical. But there is more to it. Discover their similarities and differences in this five-part series.

  [more…]

• Is Granting on All Columns Really the Same as Granting on the Table Itself?

  

  2014-01-30 - General, Security, Security Misconceptions

  Permissions on a table level and permissions granted to all columns on that table appear identical at first. However there actually is a big difference. Read on to find out all about it.

  [more…]

• ALL PRIVILEGES – The Misleading Permissions Shortcut

  

  2014-01-28 - General, Security, Security Misconceptions

  GRANT ALL PRIVILEGES suggest it will grant all applicable privileges on a securable to a principal. However, in most RDBMSs including SQL Server this is not actually the case. In addition, this feature has been deprecated. Read on to get all the details.

  [more…]