Use Incognito/Private mode to increase security

Here’s a tip that uses Incognito/Private browsing mode to increase security.

Many browsers use plugins to extend browser functionality. For example, an ad-blocker plugin is (almost) required when trying to read foxnews.com. This is not a big deal
security wise, and the plugin most certainly makes the pages less distracting and easier to read. The concern is not the use of plugins on foxnews.com.

There is a concern with using plugins on your banking site, or any other site where you display or type personally identifiable information. These bank sites (ie, etrade.com) are just an example.

The little known fact is that browser plugins frequently have access to much of the data that is typed or displayed on the screen. That access is usually required to perform their function. But, what do those plugins do with the data. It’s technically possible for them to phone home with the information. That possibility is the potential security hole being plugged with this tip.

All browsers have a mode that prevents the retention of the ‘sites visited log’. This mode is called incognito (or private) pages. Incognito  mode, for example, might be used when one visits web sites that they don’t want other users of that browser to know they visited. Maybe when one is looking for a location to host a surprise birthday party?

Incognito mode also loads without loading plugins. That’s the important part of this tip. Since plugins do not load in incognito mode (unless you’ve explicitly configured it such that the plugin must load), we can use incognito mode without the security risks of plugins. The tip: I suggest that any time you visit a website that is dealing with personally identifiable information, or any other site where you don’t want the possibility of your plugins having access to steal your information, you use an Incognito window (Chrome) or a Private Window (Firefox).

As a side note, the only plugin I allow in Incognito mode is “LastPass” as that is the only plugin that I absolutely trust.

Keywords: incognito private increase security removes plugins 

Troy Frericks.
blog 28-Feb-2020
troyf<at>CyberSecurityRecap.com

=

Copyright 2015-2020 by Troy Frericks, https://CyberSecurityRecap.com/, https://DBArecap.com/.

#

SQL Server, generate insert statements

Most developers don’t realize there is an easy way in MS SQL Server to create INSERT statements from a currently populated table. This can be useful for “promoting” data from a development environment to a production development.


This is a quick how-to tip.


To generate a CREATE TABLE statement and INSERT statements for each row in a table, in  SQL Server Management Studio (SSMS)…
  • Right  click on the database (not the table), select Tasks / Generate Scripts… (generate scripts is near the middle of the list). The “Choose Objects” window will appear
  • Check the “Select specific database objects” radio button, expand Tables, and select the specific table, click Next. The “Set Scripting Options” window will appear
  • Use the default selections, but click “Save to new query window” at the bottom. Here’s the tricky part! I’m not sure why Microsoft did this, but click the “ADVANCED” button. At the very bottom, just above the bold “Table/View Options” is the option: “Types of data to script”. Change the corresponding value from “Schema Only” to “Schema and data”. Click OK.
  • Click Next. The “Summary” window will appear.
  • Expand the “Selected Objects” tree value. Review the summary, click Next. The “Save or Publish” window will appear. Review any errors generated. Click “Finish” and the “Generate and Publish Scripts” set of windows will close. You should have a new SSMS tab with the generated script.
Discovering a method to convert from data in a table to a set of INSERT statements can take hours to figure out. It took me hours of digging. Here’s to saving your time!



Keywords: CyberSecurityRecap DBArecap microsoft sql server management studio create insert statements from table data query data creating insert statements table to inserts MS SQL Server management studio

Troy Frericks.
blog 30-Nov-2019
troyf<at>CyberSecurityRecap.com
=
#