Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 158 Stack Exchange communities.

What is meta?
Here's how it works:
  1. Any Stack Exchange user can ask a question
  2. The community provides support, votes on ideas, and reports bugs
  3. Your voice helps shape the way Stack Exchange operates

I'm not sure if you are aware of this, but Stack Exchange Data Explorer (SEDE) allows users to write their own SQL queries, and here is a list of popular queries.

What steps were taken to make sure that Stack Overflow doesn't get hacked to tears? What privileges does the SEDE SQL user account have?

share|improve this question

migrated from Dec 7 '10 at 19:17

This question came from our site for professional and enthusiast programmers.

Bobby Tables isn't allowed to use it. – Robert Harvey Dec 7 '10 at 19:18
"I'm not sure if you are aware of this" -- the guy who wrote it now works for SO – Michael Mrozek Dec 8 '10 at 20:20
up vote 15 down vote accepted

Hacked to tears you say :)

All the queries are running under a read-only user which has no write rights anywhere on the DB. This user also does not have any 'EXECUTE' permissions anywhere on the DB including the famous xp_cmdshell and so on.

Further more, all the data is hosted on dedicated hardware which in a separate data center to production, so runaway queries will only affect performance of other SEDE queries. To top that all query results are heavily cached.

share|improve this answer

Not only do these queries run on a copy of the data (released to the public every month), the prepared copy of this data dump is itself protected in that the user account used to run the queries only has read access to the data.

share|improve this answer
Speaking of data dump... how's it going for this month? :) – Greg Hewgill Dec 10 '10 at 20:41
@Greg ... see:… – waffles Dec 13 '10 at 22:50

The queries against the data explorer works on a copy of the latest data dump, not on the live site. Also, I believe it's hosted separately from the actual Stack Overflow site.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .