<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Pythian Blog &#187; database security</title>
	<atom:link href="http://www.pythian.com/news/tag/database-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pythian.com/news</link>
	<description>News and views from Pythian DBAs</description>
	<lastBuildDate>Fri, 10 Feb 2012 09:54:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>T-SQL: Retrieve all users and associated roles for ALL databases</title>
		<link>http://www.pythian.com/news/29665/httpconsultingblogs-emc-comjamiethomsonarchive20070209sql-server-2005_3a00_-view-all-permissions-_2800_2_2900_-aspx/</link>
		<comments>http://www.pythian.com/news/29665/httpconsultingblogs-emc-comjamiethomsonarchive20070209sql-server-2005_3a00_-view-all-permissions-_2800_2_2900_-aspx/#comments</comments>
		<pubDate>Tue, 24 Jan 2012 17:11:12 +0000</pubDate>
		<dc:creator>Mohammed Mawla</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[SQL Server]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[T-SQL]]></category>

		<guid isPermaLink="false">http://www.pythian.com/news/?p=29665</guid>
		<description><![CDATA[A frequent inquiry concerning databases&#8217; security is to retrieve the database role(s) associated with each user for auditing or troubleshooting purposes. Each database user (principal) can be retrieved from sys.database_principals and the associated database roles can be retrieved from sys.database_role_members The following code runs against ALL the databases using SP_MSForeachdb and all roles for one [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/29665/httpconsultingblogs-emc-comjamiethomsonarchive20070209sql-server-2005_3a00_-view-all-permissions-_2800_2_2900_-aspx/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Videos of Pythian Sessions from the 2010 O&#8217;Reilly MySQL Conference and Expo</title>
		<link>http://www.pythian.com/news/11247/pythian-2010-mysqlconf/</link>
		<comments>http://www.pythian.com/news/11247/pythian-2010-mysqlconf/#comments</comments>
		<pubDate>Tue, 20 Apr 2010 21:09:37 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[MySQL]]></category>
		<category><![CDATA[Non-Tech Articles]]></category>
		<category><![CDATA[Pythian Appearances]]></category>
		<category><![CDATA[Technical Blog]]></category>
		<category><![CDATA[community]]></category>
		<category><![CDATA[continual replication sync]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[debugging]]></category>
		<category><![CDATA[drizzle]]></category>
		<category><![CDATA[ignire]]></category>
		<category><![CDATA[keynote]]></category>
		<category><![CDATA[maatkit]]></category>
		<category><![CDATA[mk-query-digest]]></category>
		<category><![CDATA[mk-table-checksum]]></category>
		<category><![CDATA[mysqlconf]]></category>
		<category><![CDATA[mysqltuner]]></category>
		<category><![CDATA[optimization]]></category>
		<category><![CDATA[options]]></category>
		<category><![CDATA[performance tuning]]></category>
		<category><![CDATA[presentations]]></category>
		<category><![CDATA[Pythian]]></category>
		<category><![CDATA[query optimization]]></category>
		<category><![CDATA[query review]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[variables]]></category>
		<category><![CDATA[video]]></category>

		<guid isPermaLink="false">http://www.pythian.com/news/?p=11247</guid>
		<description><![CDATA[Here&#8217;s a sneak peek at a video matrix &#8212; this is all the videos that include Pythian Group employees at the MySQL conference. I hope to have all the rest of the videos processed and uploaded within 24 hours, with a matrix similar to the one below (but of course with many more sessions). TitlePresenterSlidesVideo [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/11247/pythian-2010-mysqlconf/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Pop Quiz:  MySQL Password Hashing</title>
		<link>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/</link>
		<comments>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/#comments</comments>
		<pubDate>Mon, 24 Mar 2008 15:23:07 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[ACL]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[login]]></category>
		<category><![CDATA[old_passwords]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/885/pop-quiz-mysql-password-hashing</guid>
		<description><![CDATA[The answers to the last pop quiz are up: http://www.pythian.com/blogs/868/pop-quiz-mysql-cluster So here&#8217;s another pop quiz. Given the following: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 16450949 to server version: 4.1.14-standard-log Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> select count(*),length(password) from [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/885/pop-quiz-mysql-password-hashing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Does MySQL Send Passwords In the Clear?</title>
		<link>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/</link>
		<comments>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/#comments</comments>
		<pubDate>Wed, 19 Mar 2008 23:04:21 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[MySQL]]></category>
		<category><![CDATA[cleartext]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/882/does-mysql-send-passwords-in-the-clear</guid>
		<description><![CDATA[I was asked this question recently, and I thought it was a great little tidbit of knowledge to pass along. The short answer is &#8220;no&#8221;. The slightly longer answer was written up by Jan Kneschke when dealing with a forum post about proxy + connection pooling. From http://forums.mysql.com/read.php?146,169265,169700 The clear-text password is _never_ transfered in [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/882/does-mysql-send-passwords-in-the-clear/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Why is Database Security So Hard?</title>
		<link>http://www.pythian.com/news/835/why-is-database-security-so-hard/</link>
		<comments>http://www.pythian.com/news/835/why-is-database-security-so-hard/#comments</comments>
		<pubDate>Sat, 08 Mar 2008 19:59:25 +0000</pubDate>
		<dc:creator>Sheeri Cabral</dc:creator>
				<category><![CDATA[Group Blog Posts]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[Non-Tech Articles]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.pythian.com/blogs/835/why-is-database-security-so-hard</guid>
		<description><![CDATA[I was recently asked a question by someone who had attended my Shmoocon talk entitled &#8220;Why are Databases So Hard to Secure?&#8221;. PDF slides are available (1.34 Mb). I was going to put this into a more formal structure, but the conversational nature works really well. I would love to see comments reflecting others&#8217; thoughts. [...]]]></description>
		<wfw:commentRss>http://www.pythian.com/news/835/why-is-database-security-so-hard/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

