SQL Server Vulnerability
This latest Internet-wide DOS attack was harsh (BBC article). Jason wrote about his experience with the MeFi server which explains just how malicious this thing is. I noticed a problem with my server last night around 10 PST, and haven't been able to reach it until 30 minutes ago. I've installed the hotfix, and that seemed to stop SQL Server from eating up CPU cycles. If you run a server with SQL Server installed, be sure to patch it up. Of course the best way to be secure is not to run a server at all. Or if you do, keep it locked in your closet and don't connect it to anything.
Like a lot of people, I rely on the Microsoft Baseline Security Analyzer to keep me up to date with fixes. I guess I need to add a few more checks into my routine.
Like a lot of people, I rely on the Microsoft Baseline Security Analyzer to keep me up to date with fixes. I guess I need to add a few more checks into my routine.