News for hackers. Stuff that matters.

A comment on Microsoft SQL Server uses unencrypted passwords. Parent comment

Re:Microsoft SQL Server uses unencrypted passwords by josephcsible on Friday February 18, 2022 @11:18AM (#30387627)
Like I said, I agree things could be better. I just don't think things are currently quite as bad as your original article makes them sound, and I also think it's unfair to single out SQL Server as if it were worse than normal, when it's exactly the same as basically everything else today.
[ Parent | on HN ]
Re:Microsoft SQL Server uses unencrypted passwords by maxtardiveau2 on Friday February 18, 2022 @05:56PM (#30392273)
That's a reasonable position, and I think a good conclusion to a constructive debate.

Whether it's unfair to single out SQL Server -- I don't think it is. SQL Server is one of the foundations of modern IT infrastructure, and it should be held to the highest standard. This is clearly a chink in the armor, and Microsoft seems to be aware of it.

Thanks to your pushback, I have refined my argument and will publish a significantly revised version of it on SQL Server Central (https://www.sqlservercentral.com/) on March 2. There is a preview at https://www.galliumdata.com/articles/can-we-please-stop-send... in case you're curious.

I respect your expertise, and I appreciate your civility. Thank you.

[ Parent | on HN ]