The Heap™ – Consultancy ©® - 2014-09-26 (page 1 of 2)

JNK

1:33 AM

@ConcernedOfTunbridgeWells one of these days

Aaron Bertrand

1:57 AM

PASS is such a clusterfuck

Paul White

2:29 AM

Right on

Aaron Bertrand

11:50 AM

It just keeps getting better

New Post: The Bigger #PASSVotes Problem: Your Password Was Shared. http://buff.ly/YilWJX http://t.co/IE8TCJUeOh

Tweeted by BrentO on September 26, 2014 at 11:16 AM

Also from here: "Nobody could ever find out what a particular voter has voted as the results are stored anonymously."

If they're stored anonymously, how can the web site associate my account with the candidates I voted for to show me my "receipt"?

JNK

12:21 PM

good grief

I think its probably impossible to store anonymously

otherwise how you can be sure I didn't vote twice?

Kermit

@ypercube you around?

ypercube

yep

@JNK Storing in separate tables, one for who has voted and another the votes?

Kermit

@ypercube can you gold badge vtc as dup this question?

-1

Q: php code to prevent sql injection,xss attacks,and magic quotes

below is my code i am using this code to save and insert all post values sent by the form. below code is working fine and also save and updates data correctly. I only need to secure this code from sql injection or xss attacks and also want to to encode data posted by the form. plz suggest me h...

ypercube

@Kermit you want me to hammer?

Kermit

@ypercube hammer hard

@ypercube sas ef̱charistó̱

plz suggest me how to replace this code with mysqli — vicky bajpai 4 mins ago

ypercube

12:46 PM

@MartinSmith Thnx. I remembered this issue when looking at this question (but could not locate the connect item or where I'd seen this before.): stackoverflow.com/questions/26000352/…

If you feel like it, you can post an answer there (or maybe we can migrate it here.)

Lamak

1:36 PM

@AaronBertrand This is really spot on:

> That would have taken care of the “update your profile” voting eligibility issue.

Aaron Bertrand

Does anyone even read the question anymore?

stackoverflow.com/a/26060980/61305

Hmm, one box ees broked

Lamak

@AaronBertrand the answer was deleted

Aaron Bertrand

That was quick... between ctrl+c and ctrl+v

Lamak

I'm kinda shocked about the brent post you linked

I can't understand how PASS can think that there were no risk with what they did

billinkc

-2

Q: What is Business Intelligence?

iam trying to what is mean by BI(business intelligence) asked to one of my friend he said Business intelligence (BI) is the set of techniques and tools for the transformation of raw data into meaningful and useful information for business analysis purposes. and i asked another one he is giving...

ssis etl data-warehouse

No mercy

yesterday, by billinkc

Nobody could ever find out what a particular voter has voted as the results are stored anonymously.

Voting Receipt - PASS Board of Directors Election 2014
Receipt code: T342
PASS Board of Directors Election:	Kang; Kodos

I bet PAV (Vertica) doesn't have these issues

Or members

3

bluefeet

1:55 PM

ugh

0

Q: CAST hyphen (-) to Decimal

I have to CAST '-' (Hyphen Symbol) to Decimal(8,2) in sql server. I am creating a CTE and dumping some data into a table with some columns. For 1 Column I need to dump '-' AS DECIMAL(8,2). How I will achieve this... I am using SELECT CAST('-' AS DECIMAL(8,2)) Column1 Which is throwing E...

sql sql-server casting imagemagick-convert

Zane

What would you expect a decimal value to be for a hyphen? Perhaps if you explain what you are really trying to do we can help. Just saying you need to cast a hyphen as a decimal is like saying you need to convert an elephant into a watermelon. — Sean Lange 4 mins ago

Aaron Bertrand

@ShawnMelton sorry about the correction

Shawn Melton

@AaronBertrand No worries, I'm not much for writing triggers so I figured it was going to be off...why I deleted it after seeing your answer

billinkc

2:11 PM

I hope that was worth adding comic sans to my recently used font list (it won't be)

3

ypercube

@billinkc Please add that as an answer.

billinkc

I had commented that they needed to fix the mapping and linked the image

Zane

Nope that's an answer that deserves points.

billinkc

If the arrows were hand drawn, then we'd be talking points

Zane

Dude you seriously need to post that as an answer. People need to see that.

ypercube

2:16 PM

@billinkc Start drawing.

99.9%. I'm so close.

billinkc

Happy?

Zane

Damn your freehand drawing!

JNK

oh man that's some great freehand

you should really try to fit a narwhal in there though

billinkc

My children ridicule my IRL drawing abilities. The 5 year old surpassed me about 2 years ago

Zane

2:32 PM

It's not great to be honest.

billinkc

You sonofa...

Zane

Dammit. I was hoping you wouldn't notice.

billinkc

I think the freehand is superior and will be rolling back

You can't use comic sans and not have poorly drawn lines. It's thematically correct

JNK

good gracious

billinkc

and work time

JNK

2:42 PM

It Gets Even Worse: @gortok discovers that PASS doesn't use SSL, and all passwords are sent in clear text. Updated: http://buff.ly/YjqtvN

Tweeted by BrentO on September 26, 2014 at 2:33 PM

Lamak

now you have to be kidding

JNK

nawp

Lamak

3:00 PM

it's funny though, because I'm not a PASS member and I'm still getting fed up about this whole thing. I mean, they do represent database professionals for f*ck's sake, they should be... you know, professionals about it!

ypercube

Unrelated issue. Why does www.sqlservercentral.com insist on having to register to view content?

This is so, un-internetic.

Aaron Bertrand

Yeah that has always bugged me too... but I just set it to remember me and I only have to log in when I've set up a new machine or am using a browser I don't normally use.

Lamak

@ypercube I always forget about it when seeing a link and immediately close the tab when it opens because of it

ypercube

@AaronBertrand OK. But it also means I can't use the links in SO answers. because I don't want people to be bugged.

Aaron Bertrand

@ypercube yes, that does suck

Lamak

3:24 PM

@codegumbo @BrentO what about the members who dont read blogs/twitter. they are in bad shape (publicly)

Tweeted by AllenKinsel on September 26, 2014 at 2:52 PM in reply to codegumbo

Well, I would say that they should be reading blogs/twitter

I reported the clear text password problem to @sqlpass support a few years ago. cc:@BrentO @nocentino

Tweeted by Made2Mentor on September 26, 2014 at 3:08 PM in reply to BrentO

JNK

oh my goodness

Lamak

brent pull down the youtube video showing the vulnerability though, to allow PASS to fix it first I'm guessing

well, not guessing anymore:

> We’ll report back with more information after PASS fixes the vulnerability

Kermit

missed my sarcasm

A yottarow is a lotta rows. Specifically it's 10 raised to the power (8 * 3) rows. The Greek word for 8 is οκτώ which somehow got twisted to "yoto" — Ollie Jones 6 mins ago

swasheck

sorry i'm late ... the hits just keep on coming for PASS.

Lamak

yup, it's been a non-stop thing

swasheck

3:38 PM

seems like it's not even worth updating password because everything is still cleartext/unencrypted

JNK

I would think a MegaRow would be row with @Zane referenced in it

PASS is starting to look like an NFL team now. Someone reported this issue years ago apparently, but it takes a viral video to get them to pay attention and suddenly it's an emergency.

swasheck

Remember #sqlpass folks, when you point out flaws with a process or technical setup it's not personal. In fact, it's healthy.

Tweeted by DevNambi on September 26, 2014 at 3:04 PM

Lamak

JNK

I think it's telling that some really big names who are also (I believe) considered level heads are getting upset by this

There's at least two antipodeans named "Paul" now

swasheck

@JNK is our kiwi getting enflamed?

JNK

3:42 PM

He tweeted about it

So did Randal

The @sqlpass board need to rerun this vote. With everyone that wants to participate this time. #passvotes #sqlpass

Tweeted by SQL_Kiwi on September 26, 2014 at 1:42 AM

swasheck

@JNK more recently that the comments from a few days ago? i've been at the honda dealership getting my face punced

JNK

Ok - got my reply - no vote. Maybe I'll reconsider coming to speak at #sqlPASS this year.

Tweeted by PaulRandal on September 26, 2014 at 12:40 AM

These are both within the last day or sooner

billinkc

@swasheck You might need to hit an optometrist while you're out and about. I think you walked into a boxing class

Lamak

lol

New #sqlpass password: WORSTSECURITYEVER

Tweeted by AdamMachanic on September 26, 2014 at 3:24 PM

swasheck

@billinkc probably

Aaron Bertrand

3:49 PM

@swasheck probably worth changing every other password though, if any of them were ever shared

(and I mean "shared" as in you also used that password for something else)

swasheck

@AaronBertrand right. i get that completely ... but for PASS, in particular ... should we even actually worry about that until they've resolved the issue?

JNK

I don't think so

Aaron Bertrand

well you may want to set it to something far less similar to your other passwords, if you use a common pattern or anything like that

JNK

plain text credentials is like security 101

Aaron Bertrand

however at this point it may even be riskier to do that, since the issue is more well-known now, and who knows who's going to be watching for you to enter your existing password to "fix" the issue. It's like 18 inception layers of reverse psychology.

Meanwhile, in the real world

cnn.com/2014/09/26/travel/chicago-ohare-midway-flights-stopped/…

billinkc

3:55 PM

Just send me your spreadsheet of passwords and sites and I'll fix it all

JNK

list just add a ! to all your passwords

it makes them more emphatic AND more secure!

billinkc

I applied double rot-13 encoding to all of my passwords whenever I hear of these things being exposed

JNK

Easy solution, SELECT NEWID()

theres a password!

swasheck

4:11 PM

@AaronBertrand wow.

Shawn Melton

4:28 PM

SPAM

never mind

Max Vernon

4:51 PM

@AaronBertrand > dba.stackexchange.com/questions/77744/…

agreed.

I complained to PASS about the cleartext storage of passwords about 5 years ago; also I was shocked when they sent my password via email (not a temporary password!!!). If anyone should know better, it definitely should be them.

clearly I now have a different password for PASS.

Lamak

@MaxVernon really?, that's bad

swasheck

i do wish i'd known the date for sql sat orlando. i feel like they announced it late (i could be wrong, though)

Max Vernon

@Lamak yeah it blew me away. I was actually gob-smacked. I can understand your average mom-and-pop store having shitty security, but Professional Association of SQL SERVER???

Aaron Bertrand

Yeah it is sad, and people are killing Brent for pointing it out.

Lamak

@MaxVernon and they later claim that there wasn't responsible disclosure about it

Aaron Bertrand

4:59 PM

Look, I get the "first disclosure" thing, but I think it is more responsible to let the public know that passwords are currently being sent in clear text than it is to privately tell PASS and wait 6 months (or forever) to actually do something.

ypercube

@MaxVernon It's just PASS now. Not an acronym ;)

Lamak

@AaronBertrand I agree with that

And they also were made aware of the whole thing years ago

privately, and nothing got done

and more than once it seems

Shawn Melton

Could have sworn this question was flagged as duplicate this morning:

1

Q: how to compare data between staging and operational tables

just want to ask how to compare to database table staging VS operational tables after we did the transformation and convert it to correct datatype like convert flag Column(Y/N) nvarchar to bit or to int. how to compare data between the tow table

sql-server etl

Aaron Bertrand

@ShawnMelton yeah I re-opened it because I don't think it's quite the same thing and I think it can be solved easier than the accepted answer on the duplicate. I started formulating an answer and then got dragged away on other stuff.

Shawn Melton

@AaronBertrand Well the answer to the other question did include comparing data, just using RedGate tool...that is only reason I thought they were similar

Aaron Bertrand

5:10 PM

To give you an idea of the length of my answer-in-progress

Note the scrollbar. :-)

I just don't know when I'll get back to it

Lamak

So, I'm not really immersed in the big leagues of SQL Server, and don't know all the big names, but I don't like this person

I worked to get issue resolved. I didn't use it to get traffic or fame. It did was was required professionally. Everybody won.

Tweeted by datachick on September 26, 2014 at 4:46 PM

JNK

She can be a little abrasive sometimes

Lamak

I could have tweeted and blogged and shat upon the company. But I don't need to do that. YMMV

Tweeted by datachick on September 26, 2014 at 4:47 PM

JNK

I also find the implication that Brent is posting this stuff for SEO laugable since he doesn't have ads or anything

Lamak

@mark_AzureCAT Thank you. I'm getting so tired of the poison. And gloating. All this for SEO is making the whole community look bad.

Tweeted by datachick on September 26, 2014 at 3:45 PM in reply to mark_AzureCAT

JNK

5:20 PM

yeah I know I've been reading it

Lamak

@JNK Ah, well, as I said, I don't know her, but I already don't like her

Aaron Bertrand

Yeah Brent is burning bridges with everyone inside PASS so that he can get one additional consulting client

Or maybe he actually wants the community to know about these vulnerabilities (and wants them, too, to question PASS for how they happened and, more importantly, why they sweep them under the rug)

Lamak

@AaronBertrand I'll remember that for the future

JNK

I honestly don't think Brent needs new clients anyways

Aaron Bertrand

Anybody who's painting him as the bad guy or thinks he is doing this for SEO or to be a prick just doesn't get it.

JNK

5:27 PM

I think there's an understandable defensiveness from the BoD now and their defenders since they have taken a lot of flak in the past few weeks

but it's also honest and justified criticism

Lamak

@AaronBertrand exactly

JNK

just because there's a lot of it doesn't mean its not right

Aaron Bertrand

5:39 PM

And they're all being discovered by waterfall. It's not like Brent is waking up every morning and thinking, "Hmm, what kind of issues can I attack PASS for today." These are all issues that are getting discovered because people are looking more closely at the things he's already brought up.

JNK

yep

Once you start looking closely it's not pretty :(

Lamak

@sqlpass has identified the security vulnerability reported earlier. Fix is in progress. Thanks for your support! #sqlpass

Tweeted by ajbigdata on September 26, 2014 at 5:39 PM

Aaron Bertrand

How sad that I am fighting the real urge to reply and ask "which one?"

Lamak

duh, the one reported earlier

;-)

Aaron Bertrand

Ha ha

Shawn Melton

5:44 PM

Would love to be fly on the wall for this one

#sqlpass the Exec Co has called for a special board meeting today on #passvotes , working to pull that together across time zones.

Tweeted by denisemc06 on September 26, 2014 at 5:14 PM

There never is a short of drama somewhere in the interweb

Lamak

@AaronBertrand still, with this, how can you doubt that this method isn't a good thing?. @MaxVernon said that he notified them about the plain text password thing like 5 years ago and another guy said he did the same a couple of years ago. One blog post from Brent and today a "fix is in progress"

Aaron Bertrand

Yeah I'm going to tweet something like that

Lamak

You'll get a far broader audience than me (and carry a lot more weight behind it too)

Aaron Bertrand

Feel free to question @BrentO's methods, tone or motives; they get results. A fix in the works today for a vulnerability reported years ago.

Tweeted by AaronBertrand on September 26, 2014 at 5:51 PM

ypercube

Yey! From now on, please call me Marshall Ypercube

JNK

5:56 PM

yep

Aaron Bertrand

(Sorry, cleaning up a couple of earlier posts, lest a certain someone discover them.)

JNK

yep understood

I assumed you would be shortly

Lamak

@ypercube I will, mr Marshall

@AaronBertrand wonder if I should do the same. But well, I don't know her and I'm guessing that I never will

JNK

Marshall Ypercube sounds like the new Eminem album

Aaron Bertrand

Ypercube mathers

JNK

5:58 PM

Marshal Ypercube is a law enforcement officer with Interpol

James

6:21 PM

Is an interview question the same as homework?

0

Q: How much time it will take to backup a 500GB database with mysqldump?

I'm preparing for MySQL DBA & came across this kind of question in interview. Can you please help me out.

mysql mysqldump

Max Vernon

@ypercube nice!

billinkc

Son, let me tell you of Field Marshall Ypercube and his helpful DBA campaign.

He swept across the northern part of DBA SE, raising the flag of moderators on all the unhelpful crap. He was something to behold, in all his cubey glory

3

ypercube

This down under guy is going to be the 10th to reach 20K at dba.se

billinkc

citylab.com/design/2014/09/…

Aaron Bertrand

@ypercube not if I can help it! <down-vote> <down-vote> <down-vote>

2

Paul White

6:36 PM

Hey!

Aaron Bertrand

Oh, hi Paul!

Paul White

My goodness what is going on with the world today. Just waking up and there's another PASS issue? Wowzers.

Aaron Bertrand

Seriously now, have you ever been down-voted here?

Paul White

Once.

Aaron Bertrand

Two new PASS issues.

Paul White

6:38 PM

I've just read Brent's updated post. Is there something else besides the MITM thing?

Aaron Bertrand

Wow was it on the "Why should I allow NULLs?" or "What tech does Google use?" questions?

@PaulWhite yes, some of their forms on their web site where you enter password, were not using SSL

Lamak

@PaulWhite quite some drama, actually

Paul White

Revenge down vote for something or another, I don't recall which question it was.

@AaronBertrand facepalm

@Lamak I honestly can't believe what I'm reading this morning. And no coffee yet.

Lamak

@PaulWhite yeah, and it started quite the shitstorm for brent

Aaron Bertrand

It is pretty bad. And they've known about that one for YEARS

Paul White

6:40 PM

@Lamak Did it? Why? He did the right thing, didn't he?

@AaronBertrand Words fail me.

Lamak

@PaulWhite beats me, people are weird

1 hour ago, by Lamak

@mark_AzureCAT Thank you. I'm getting so tired of the poison. And gloating. All this for SEO is making the whole community look bad.

Tweeted by datachick on September 26, 2014 at 3:45 PM in reply to mark_AzureCAT

1 hour ago, by Lamak

I could have tweeted and blogged and shat upon the company. But I don't need to do that. YMMV

Tweeted by datachick on September 26, 2014 at 4:47 PM

Paul White

Thanks for the random upvotes whoever that was. I will admit I am quite excited about reaching 'trusted user'. I know I shouldn't be, but I can't help it :)

Lamak

and quite some heat about "first disclosure", even when they were aware of it for years

Paul White

Oh Karen Lopez, well 'nuff said.

Lamak

@PaulWhite so I've been told

Paul White

6:42 PM

She performs her function, I guess.

Lamak

well, I don't know her

but don't like her

Kermit

^ spoken like a true man

Paul White

@BrentO It's just silly to paint you as the bad guy here. People don't like your tone but this seems to be the only way that actually works.

Tweeted by AaronBertrand on September 26, 2014 at 5:53 PM in reply to BrentO

This beaker guy seems to have his head screwed on right. We should recruit him/her.

Lamak

yup, since I've never been really immersed in the SQL Server world (twitterverse and the big names), I'm kinda shocked about some of the reactions about this whole thing

56 mins ago, by Lamak

@AaronBertrand still, with this, how can you doubt that this method isn't a good thing?. @MaxVernon said that he notified them about the plain text password thing like 5 years ago and another guy said he did the same a couple of years ago. One blog post from Brent and today a "fix is in progress"

Aaron Bertrand

It is all rather embarrassing and it won't end well (some of the issues will get fixed, but people are taking this way too personally). But I'm glad I found out from Brent's blog and not because my password was exploited.

To their credit, they fixed the plain text password issue amazingly quickly for them, once it became a public issue. That they sat on it for 5 years and did nothing is the much bigger problem.

James

6:51 PM

I've never been to PASS, but it sounds like the board made some bad decisions about who is speaking this year and who spoke last, so it seems like a good time to get more critical of them.

Paul White

@James Are you saying the people raising these issues are just bitter?

Lamak

@AaronBertrand much how the blog post was initially about them not disclosing the MITM risk a couple of months ago (even if it is resolved now)

James

@PaulWhite No, I'm not being sarcastic at all. I think the board has been turning down some really good sessions and accepting some 'speaker 47' ones.

Paul White

Has there been any sort of official response to all this yet? Aside from "a fuller response is coming", I mean.

Aaron Bertrand

@James I think these things are totally unrelated. Is Brent unhappy he didn't get a pre-con? Sure. He's over it. He's hosting his own training event instead and will probably make a lot more money that way.

Lamak

6:54 PM

1 hour ago, by Lamak

@sqlpass has identified the security vulnerability reported earlier. Fix is in progress. Thanks for your support! #sqlpass

Tweeted by ajbigdata on September 26, 2014 at 5:39 PM

Paul White

@James Ok thanks, I had to clarify because I'm famously bad at reading between the lines.

Aaron Bertrand

@PaulWhite I took it the same way

Lamak

@PaulWhite and bout the pass votes:

#sqlpass the Exec Co has called for a special board meeting today on #passvotes , working to pull that together across time zones.

Tweeted by denisemc06 on September 26, 2014 at 5:14 PM

James

I don't mean to dismiss the security problems. I'm just more troubled by the tendency to downgrade the technical quality of the conference. And to take it in weird directions that it seems like not many people who work with SQL Server are interested in.

Paul White

@Lamak Thanks. I've seen most of the tweets now, I think. Was more wondering if there was anything properly official e.g. on the PASS blog. I guess I could go look ... :)

@James Like the BI/BA conference? I agree that is an odd change of direction.

Lamak

6:58 PM

oh, ok, was trying to save you some time browsing the massive amount of tweets about the whole thing

Paul White

But maybe I've been reading too many Ozar posts recently lol

@Lamak And I thank you for that :)

James

@PaulWhite Yes, like that. I can understand wanting more sessions about the MS BI stack. I think BA is something a bit different and none of the people I've met who do analytics work are remotely interested in MS products.

Aaron Bertrand

Well there are multiple issues.

1. People who didn't update their profile before June 1st don't get a vote. They are supposedly meeting about that today but according to Paul R. as of an hour or so ago the word to him is still no.
2. Your password may have been shared with a 3rd party if you voted in the NomCom. That has been addressed (I don't know exactly when) and shouldn't be an issue in the current election. They feel the issue is fixed but there still could be lurking dangers in there (e.g. someone who has passwords and has voted on users' behalf or still plan to). The bigger issue i…

This last one is the only one that has truly been both acknowledged and fixed.

Lamak

@PaulWhite the funny part of this for me is that I'm not even a PASS member, and I neither participate in the SQL Server "community" (only The Heap). And even so, I'm kinda outraged about this whole situation, the way it was handled by a group of professionals about databases

Paul White

Right.

Thanks Aaron.

Aaron Bertrand

7:03 PM

I'm not good in inglish — hasn batal 50 secs ago

The worst part is that Brent published that post, and then people snooped around and found password forms without SSL, and said something. So anybody with 4chan aspirations could have done naughty things, right at a time when hundreds of people were about to go change their password.

billinkc

PASS should just regenerate everyone's password and then send them an email with the new credentials. In fact, I'll go suggest that

Lamak

yup, that's actually a very serious risk

@AaronBertrand was it fixed already?, I thought they just had identified it

billinkc

It's an easy fix as K Brian Kelley pointed out. Get certificate, change settings in DNN. Done

James

Does PASS have paid staff looking after their web operations? Some of the mistakes they're making are things that some of the most incompetent web hosting customers I've worked with wouldn't do.

2

billinkc

I am pretty sure it's the Christianson and Company that do the marketing and day to day operations providing the IT staff as well

@AirborneGeek Issue the cert, a couple of DNN settings, and you're good to go.

Tweeted by kbriankelley on September 26, 2014 at 6:14 PM in reply to AirborneGeek

Aaron Bertrand

7:11 PM

@Lamak yeah the forms are all SSL now from what I've seen (I haven't verified personally)

Lamak

ah, thanks

Aaron Bertrand

Doesn't mean no passwords were observed over the last 5 years, just that no more should be

billinkc

Except that the NSA issued the certs and can eavsedrop all they wish

Lamak

right, doesn't mean that no one took advantage of it over time, specially if it was a known issue for some people

Martin Smith

@ypercube close enough as a dupe? stackoverflow.com/q/8271045/73226

ypercube

7:16 PM

I think so.

Kermit

vtc plz

0

Q: Quering vertica with ado.net

I'm querying Vertica with ado.net driver. my query has group by clause with complex case statement. when i am running the query with dbeaver client it works fine but on my application it throws an exception that the group by column must appear in both the group by and the select statement and i...

ado.net vertica

ypercube

@MartinSmith On the other hand, it's not exactly duplicate. The reason is the same, I agree. But many people will not quite comprehend that a subquery and a view have similar behaviour.

Martin Smith

@ypercube Dupe Hammered then un hammered in quick succession then! The closure auto deleted your comment I'm afraid as it contained a link to the potential dupe.

swasheck

@PaulWhite oh man ... i have a tweet reply all queued up. not sure it'd be constructive. has something to do with roger goodell suggesting more transparency from the PASS leadership or something.

probably get flagged as "not constructive"

ypercube

7:32 PM

Just noticed the image in Brent's blog post. Nice pun.

swasheck

@ypercube yeah

what really makes me the most frustrated is the army of sycophants coming out in support of PASS. nobody's officially "owned" the mistakes and nobody's communicated anything. the stupid "hater" culture that we're in is below a professional organization but apparently if you don't just bow down and worship at the altar of the executive board, you're going to be accused of slander, libel, and "hating."

intellectual dishonesty pisses me off

Aaron Bertrand

don't forget bashing and shatting on

Mike Fal

I did get my wall of text out, btw

swasheck

libel
[ ˈlībəl ]
noun
a published false statement that is damaging to a person's reputation; a written defamation. Compare with slander.

Paul White

Aside from the predictable Lopez factor, who are we talking about here?

Lamak

7:36 PM

@swasheck I wholeheartedly agree

swasheck

slander
[ ˈslandər ]
noun
the action or crime of making a false spoken statement damaging to a person's reputation: Compare with libel.

@PaulWhite the mark azure guy

Aaron Bertrand

I'm trying to combat a little of that. But as a representative of a PASS global partner (the only one I think) I have to walk a fine line.

swasheck

at a minimum

i've seen neither slander nor libel

Paul White

@swasheck Souza?

swasheck

also ... wtf

Mind = Blown http://t.co/XdycwjudaY

Tweeted by DepressedDarth on September 26, 2014 at 7:03 PM

@PaulWhite right. him. i think.

Lamak

7:38 PM

@swasheck any links?

@AaronBertrand I would speak more about this, but I'm a complete stranger for everyone except the regulars here

billinkc

And pretty strange at that

swasheck

meh. i just want someone to own the mistakes that have been made and say that we're moving on. all the secrecy and shadow communications are just eroding confidence.

Lamak

I should have expected that comment

ypercube

@AaronBertrand I guess noone noticed that "bashing" is a pun these days, regarding vulnerabilities.

Aaron Bertrand

Saddened by the bashing of #sqlpass from the #sqlserver community. Good people, good intentions trying to help. Not the community I love

Tweeted by mark_AzureCAT on September 24, 2014 at 10:41 AM

ypercube

7:40 PM

And I'm pretty sure not even the guy who wrote that.

James

I'm shellshocked from all this bashing

3

Aaron Bertrand

For those who don't know, Mark is pretty high up at Microsoft and used to serve on the PASS board.

swasheck

@ypercube worse than heartbleed, apparently

Lamak

@AaronBertrand I'm one of those that didn't know

@swasheck that's Marshal @ypercube, son

billinkc

I just saw yesterday that Quentin Clark is no longer in charge of SQL Server type things. Moved over to business products in June

Aaron Bertrand

7:42 PM

Yep Q is gone

swasheck

@AaronBertrand loved peschka's follow-up to that

billinkc

(Mark reported to Quentin)

Aaron Bertrand

(He wasn't very technical, to be honest, and I don't know how much he really grasped about SQL Server)

billinkc

I enjoyed his summit presentations rah rah talks

swasheck

@Lamak nor i. i dont know anyone, really. i'm somewhat of an outside when it comes to who's who. i know that @PaulWhite is an optimizer badass. i know that @AaronBertrand is a t-sql fundamentals and query plan dude of dudes. and i know that paul randal and kimberly tripp are the people to whom i turn when it comes to down-and-dirty internals.

the MS hierarchy or who's who ... i'm a derp

Aaron Bertrand

7:44 PM

Still not impressed by all the dick waving. But I support your need to show it when you feel the need to be special.

Tweeted by datachick on September 26, 2014 at 6:52 PM

Lamak

@swasheck Are you kidding me?, if you are an outsider, then I don't know what I am

Aaron Bertrand

Aw man, that was star-worthy

swasheck

@AaronBertrand does richard know that he's being bandied about?

Aaron Bertrand

Oh I hope so

swasheck

@PaulWhite holyfrickinhilarious

Lamak

7:45 PM

@AaronBertrand I see what you meant previously

Paul White

@AaronBertrand It had it's brief moment in the sun :)

Aaron Bertrand

Biggest. Hypocrite. Ever.

Kermit

@PaulWhite your removed comment is funny

Aaron Bertrand

Funniest part is for all of the passive aggressive crap she posts about Brent, she's also blocked him, so he only sees the things people he's following re-tweets.

Lamak

@AaronBertrand ah, so it's truly passive aggresive

Paul White

7:49 PM

@Kermit Yeah, little bit too mean though.

billinkc

Sounds like a Passive Active Aggressive node

swasheck

@AaronBertrand she's still mad that kendra got the gig and she didnt?

Max Vernon

@PaulWhite you're a veritable fountain of knowledge. I had no idea you had this level of knowledge about MySQL

5

A: Query taking too much time

The core issue appears to be that the optimizer does not (or cannot) use the index idx_17109 to seek for the c.precedence IS NOT NULL predicate. The following modification allows the seek, but still requires a hint to avoid the sort: SELECT pcm.catalog_id FROM cat_catal_defer AS c USE INDEX...