Posted by
Jason Massie 
on Monday, July 28, 2008 at 10:50 PM to
SQL Server 2008, Windows Server 2008, Offtopic
188 Views |
3 Comments |
The PHP Driver for SQL Server 2005 RTM'ed today. A few months ago, I posted about the WIMP(Windows 2008, IIS7, MSSQL, PHP) stack that Microsoft was working on to take on the LAMP(Linux, Apache, MySQL, PHP) stack. Supposedly, Microsoft has made some tremendous strides in PHP performance with IIS7. I was like "meh" until today when they released the PHP driver for SQL Server 2005.
Test drive time?
Hmm, maybe it is time to setup a wordpress mirror. While looking looking for some IIS\PHP benchmark, I found this post that details the setup. I am pretty sure I could hack the MySQL code to work on MSSQL. *Looks at plate. Reconsiders.*
This post is useless without numbers
What does concerns me a little is the lack of benchmarks. It seems like it would be really easy to take the same open source php apps and the same hardware then run some linux vs. windows 2008 performance tests. I just did some quick searches so they may exists. The windows performance team did release their php tuning guidelines. Come on with the numbers Microsoft!
Time to over deliver
Really, it has to be better than LAMP or the community will chew it up and spit it out. I hope WIMP is actually hefty, hefty, hefty. I think MSSQL(and Oracle\DB2) have had slower growth due to open source RDMS bleed. A stout windows PHP platform, this driver and SQL Server 2008 Web Edition will better position MS in that segment.
Posted by
Jason Massie on Tuesday, July 08, 2008 at 12:11 PM to
bugfix, SQL Server 2005, Windows Server 2008, security
309 Views |
0 Comments |
Well, it was a great run. SQL Server 2005's pristine security record is now tarnished. In fact, there has not been a new SQL Server security vulnerability since 2003. It looks like they took the SQL slammer lesson to heart.
"
Executive Summary
This security update resolves four privately disclosed vulnerabilities. The more serious of the vulnerabilities could allow an attacker to run code and to take complete control of an affected system. An authenticated attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
"
1. Memory Page Reuse Vulnerability - CVE-2008-0085
An information disclosure vulnerability exists in the way that SQL Server manages memory page reuse. An attacker with database operator access who successfully exploited this vulnerability could access customer data.
2. Convert Buffer Overrun - CVE-2008-0086
A vulnerability exists in the convert function in SQL Server that could allow an authenticated attacker to gain elevation of privilege. An attacker who successfully exploited this vulnerability could run code and take complete control of the system.
3. SQL Server Memory Corruption Vulnerability - CVE-2008-0107
A vulnerability exists in SQL Server that could allow an authenticated attacker to gain elevation of privilege. An attacker who successfully exploited this vulnerability could run code and take complete control of the system.
4. SQL Server Buffer Overrun Vulnerability - CVE-2008-0106
A vulnerability exists in SQL Server that could allow an authenticated attacker to gain elevation of privilege. An attacker who successfully exploited this vulnerability could run code and take complete control of the system.
The full article can be found here.
Don't know what "Windows Internal Database" is? I didn't either. Here is the wikipedia entry. I wonder if Windows 2008 will get an upgrade when Katmai RTM's.
Update: The binaries have been released. SQL 2005 gets bumped to version 9.00.3233.00. The direct x86 and x64 SQL 2005 download is here. Refer to the full article for 7.0, 2000, and express editions.
Posted by
Jason Massie on Sunday, April 13, 2008 at 9:23 PM to
SQL Server 2008, Windows Server 2008, Heroes Happen Here
159 Views |
0 Comments |
Zain announced that there will be a Second Life Virtual Launch April 26th. It looks like the sessions are the same as the live events. That means I can mix and match VS and Windows 2008 sessions since I have already attended the SQL track in Dallas. Here are the details from Zain.
If you have not had a chance to mess around with SQL Server 2008 much yet, I highly recommend you checking it out. They are not 400 level sessions but they are not marketing fluff either.
read more
Posted by
Jason Massie on Friday, April 04, 2008 at 8:23 PM to
SQL Server 2008, Windows Server 2008, Heroes Happen Here
259 Views |
0 Comments |
TechCrunch reports that google is going to be entering the cloud data services market. Actually, they are going to make available to the public what is already running production google apps. This is after Microsoft announced their public free beta of SSDS and Amazon launched simpledb.
What does this mean for the DBA? That is hard to say. I find it hard to believe a round trip over SSL to a remote data center will provide the performance needed for enterprise apps. I don't know enough about it to speculate yet. Denis Gobo posted about this topic when amazon launched. Check it out. Good info.