Raul Garcia's blog

Back to my personal blog

I am no longer part of the SQL Server team, but I still have a lot of passion for security and SQL...

Author: Raul Garcia - MS Date: 12/05/2011

SQL Server Security team is starting a new blog

First of all, I am really sorry for not writing anything for quite a long time. The SQL Server...

Author: Raul Garcia - MS Date: 11/29/2007

I am adding a link to one of the MSDN SQL Server Security forum discussion regarding application...

Author: Raul Garcia - MS Date: 07/13/2007

Dynamic SQL and digital signatures in SQL Server 2005

As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server...

Author: Raul Garcia - MS Date: 05/09/2007

After a long delay, I am ready to start posting again

I know it has been quite some time since I added any new content, I sincerely apologize for that,...

Author: Raul Garcia - MS Date: 05/09/2007

Dynamic SQL & SQL injection

I know there are a lot of papers that talk about dynamic SQL in more depth than what I am going to...

Author: Raul Garcia - MS Date: 01/04/2007

Let's talk about Dynamic SQL (preamble)

I want to talk about how dynamic SQL is affected by the execution context, but as this is a huge and...

Author: Raul Garcia - MS Date: 01/04/2007

Using a digital signature as a secondary identity to replace Cross database ownership chaining

In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access...

Author: Raul Garcia - MS Date: 10/30/2006

Quick guide to DB users without logins in SQL Server 2005

SQL Server 2005 introduced a new SQL DB principal subtype that can be quite useful: a SQL user that...

Author: Raul Garcia - MS Date: 07/03/2006

How to distribute digitally signed SQL modules

Digital signatures in SQL Server 2005 modules can be used to extend the privileges of the caller for...

Author: Raul Garcia - MS Date: 05/29/2006

SQL Server 2005 –Encrypting data on existing applications

SQL Server 2005 encryption requires the application to be aware of it and to decrypt the data before...

Author: Raul Garcia - MS Date: 05/04/2006

I am including a link to Laurentiu Cristofor's blog: http://blogs.msdn.com/lcris. Laurentiu is one...

Author: Raul Garcia - MS Date: 05/04/2006

Indexing encrypted data

Encrypted data and indexes One thing I have been asked many times is how to create an index on top...

Author: Raul Garcia - MS Date: 03/12/2006