Sandbox testing works well when your team controls both sides of the integration. You define the service, you define the mock, you know exactly what the sandbox should return. That setup holds up fine for internal microservices and first-party APIs.It starts to break down when you don’t own the dependency. Payment processors, identity providers, SMS gateways, banking APIs, shipping integrations—these are services your system depends on but can’t fully replicate. Their providers give you a sandbox environment, but that sandbox is a simulation they maintain, not a mirror of what production actually does. The gap between the two is where…
Author: drweb
Everyone writes about AI generating queries. Nobody writes about the strange jobs it is actually doing inside real database teams. These are nine of them, and I helped build every one.I want to say something before the technical part, because it is the reason I wrote this at all.The most satisfying work of my career has not been tuning a query. It has been walking into a room where a team is quietly terrified of their own database, and walking out three days later with them arguing confidently about it. That shift is the whole job. It is also the…
Docker Captain Aug 5, 2026 Governance Is a Developer Experience Problem Learn why AI governance is about more than security. Discover how trust, clear boundaries, and developer experience enable AI adoption at scale. Read now
I got a notification from a question I’d posted at SQL Server Central: Getting the Average. A user had posted their repro didn’t work, with no real comment. As a SQLNewBlogger FYI, that type of post shows poor communication and a lack of communication. I see that a lot and it’s a challenge in the modern world. Another post for me that is simple and hopefully serves as an example for people trying to get blogging as #SQLNewBloggers.A Quick SetupThis was what the user posted:declare @t table ( id int identity , i int ); insert @t select null; insert…
Atlanta, GA, August 4th, 2026, CyberNewswireAirlock Digital announces Agentic AI Control & Governance, extending its preventative endpoint security solution with visibility into trusted AI agent behavior and governance over what trusted agents are allowed to do on endpoints. Atlanta, GA—August 4, 2026—Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabilities build on application control by providing command- and session-level visibility into trusted AI agent behavior, centralized policy management for trusted applications and AI agents, and real-time governance over what trusted AI agents are allowed to do…
You’ve probably run df -h, waited a few seconds, and run it again while a file copy or backup was in progress. Instead of repeating the command yourself, watch can do it automatically. It reruns the command at a fixed interval and even highlights what changed, so it’s easy to spot updates. Linux administrators and everyday Linux users often need to run the same command repeatedly while waiting for something to change. You might be checking disk space during a file copy, waiting for a service to start, or watching network connections while troubleshooting. Running the same command every few…
Many MCP projects begin with an existing API and a simple request: expose one backend capability to an LLM client. The quickest route is to wrap an endpoint as a tool and connect it to Claude or another MCP host. Users can then ask for data in natural language instead of navigating a fixed interface. This creates a production boundary because the model, rather than application code, chooses which operation to call.At Fullinfo, more than 1 million company profiles are served through a GraphQL backend on AWS AppSync. Users previously searched a portal and worked with the results using deterministic…
SQL Server sa Account Security: Rename, Disable & Best PracticesIn the Windows administration world, it’s pretty much a standard practice to rename the local administrator account (BUILTINAdministrator) to something else.In the SQL Server world, it’s not as common to rename the sa account. In fact, some DBAs may not be even aware this is possible, mainly because the recommended security best practice is to avoid running your SQL Server instance in Mixed Mode Authentication in the first place, and under Windows Authentication mode, the sa account is disabled by default.Now there’s some debate over whether renaming the sa login is…
Everyone is waiting for AI training at work. It took me a hundred conversations to understand what they are actually waiting for, and it is not a course.AI training at work is the most requested thing I hear about now, and almost nobody I meet has actually had any. I finished a session last month and a man waited until the room emptied before he came up to ask me something. That usually means the question is not about indexes.He asked when his company was going to train them on AI.Not whether. When.A quick note. The people in this piece are…
RapidFort today at the Black Hat USA conference announced it has extended its ability to secure open source software to the runtimes that DevOps teams deploy in production environments.Michael Wood, chief marketing officer for RapidFort, said the RapidFort Runtime platform makes it possible to now monitor open source software deployed within a container image to detect unauthorized or unexpected changes, and proactively assess the impact any report of a newly discovered Common Vulnerabilities and Exposures (CVE) might have.The overall goal is to make it simpler for DevOps teams to run the curated open source software packages that RapidFort already provides…