4 ms·

This is a bit click-bait-y. Mongo gets a lot of flack, but this really applies to any database.

andrewguenther 11y ago
I don't understand how this is "click-bait-y." The link title says it just like it is. It is an article about Mongo databases publicly exposed on the internet. Also, the author stresses that this problem is not unique to mongo.
revelation 11y ago
https://github.com/postgres/postgres/blob/master/src/backend/utils/misc/postgresql.conf.sample#L59 https://github.com/postgres/postgres/blob/master/src/backend...
- patrickaljord 11y ago
  Believe it or not but this is one of the top reason people who tried postgresql got a bad first experience and skipped to mysql, granted they probably were not highly skilled in databases or in basic networking and security or just couldn't bother to look up how to fix that weird "connection refused from non localhost ips" error.
taylorwc 11y ago
The post is a little bit shallow, but the author does recognize exactly this point at the end of the post.
achillean 11y ago
Author here: I completely agree that it applies to any database and I tried to mention it in the article. The reason I wrote about MongoDB is: - I wrote about it before and could compare results from my previous post - It's popular and there are a lot of public instances of it - MacKeeper exposed 13 million user accounts through their public MongoDB instance And I actually wrote a follow-up post on Memcached to highlight the same issue: https://blog.shodan.io/memory-as-a-service/ https://blog.shodan.io/memory-as-a-service/
- muzmath 11y ago
  Unfortunately that's not how your article has been interpreted, especially not in the reddit thread which has (predictably) divulged into an incoherent MongoDB hate-fest.
  - throwaway2048 11y ago
    The author doesn't owe mongoDB a PR whitewash.
    - muzmath 11y ago
      I'm not talking about what the author wrote, I'm talking about the 500 posts which entire take away was 'mongo is retarded'. Reread what I wrote.
ossreality 11y ago
1. No, it doesn't. Name a relational db that defaults to listening on all interfaces with no auth. I'll wait. 2. The author fully acknowledges that other NoSQL DBs are affected. Right there in the post.

I don't understand how this is "click-bait-y." The link title says it just like it is. It is an article about Mongo databases publicly exposed on the internet. Also, the author stresses that this problem is not unique to mongo.

revelation 11y ago

https://github.com/postgres/postgres/blob/master/src/backend/utils/misc/postgresql.conf.sample#L59 https://github.com/postgres/postgres/blob/master/src/backend...

patrickaljord 11y ago
Believe it or not but this is one of the top reason people who tried postgresql got a bad first experience and skipped to mysql, granted they probably were not highly skilled in databases or in basic networking and security or just couldn't bother to look up how to fix that weird "connection refused from non localhost ips" error.

taylorwc 11y ago

The post is a little bit shallow, but the author does recognize exactly this point at the end of the post.

achillean 11y ago

Author here: I completely agree that it applies to any database and I tried to mention it in the article. The reason I wrote about MongoDB is: - I wrote about it before and could compare results from my previous post - It's popular and there are a lot of public instances of it - MacKeeper exposed 13 million user accounts through their public MongoDB instance And I actually wrote a follow-up post on Memcached to highlight the same issue: https://blog.shodan.io/memory-as-a-service/ https://blog.shodan.io/memory-as-a-service/

muzmath 11y ago
Unfortunately that's not how your article has been interpreted, especially not in the reddit thread which has (predictably) divulged into an incoherent MongoDB hate-fest.
- throwaway2048 11y ago
  The author doesn't owe mongoDB a PR whitewash.
  - muzmath 11y ago
    I'm not talking about what the author wrote, I'm talking about the 500 posts which entire take away was 'mongo is retarded'. Reread what I wrote.

ossreality 11y ago

1. No, it doesn't. Name a relational db that defaults to listening on all interfaces with no auth. I'll wait. 2. The author fully acknowledges that other NoSQL DBs are affected. Right there in the post.