- only listen on one protocol;
- in your day-to-day use, run as less than Administrator;
- run services as Network Service, rather than Local System;
- use parameters instead of dynamic SQL (I’ve heard about this one before, but Ron demonstrated it for me, and was very impressive). When you use parameters, SQL knows not to confuse data with code.
- Don’t give out too much information in error messages. I’ve been guilty of this one. Especially duing debugging, but then forget to remove it later in production.
Pizza was excellent, as usual. Unfortunately, some people who told Kirk Jackson (DNUG Coordinator) they were coming, didn’t. Kirk had to turn people away because of the numbers who said they were coming. Fortunately, that meant I got to take some pizza home for my family.
Also, Kirk remembered to get Diet fizz, which was nice.