Sunday, January 25, 2004 - Posts

.NET wishlist Issue 2 (IPSEC and ADO.NET connections)

A connection to a DB from ADO.NET should be mandated with IPSEC, just as Forms Authentication requires SSL by default.

BTW, is there a way to detect if the connection goes over IPSEC.

SQL Server and deadly Port 1433 idiots

Everytime I see an instance of SQL Server installed with the  port 1433 open, I get mad.
Since multiple trojans target port 1433, why would anyone NOT change the default port 1433 when risking to get their systems infected?

ADDENDUM:

http://www.itsecurity.com/asktecs/oct3903.htm
http://support.microsoft.com/default.aspx?scid=kb;EN-US;815146