4 ms·
How about expecting that DB doesn't bind to 0.0.0.0 by default and to force passwords to be set during the installation? Is that such an unreasonable thing to e
by ivanhoe 10y ago
How about expecting that DB doesn't bind to 0.0.0.0 by default and to force passwords to be set during the installation? Is that such an unreasonable thing to expect?
- peterwwillis 10y agoYes. Expecting anything to be secure by default is unreasonable. It would be nice, but I would not just expect it, I would confirm it. Expecting it to be secure on the internet is even less reasonable.
- ivanhoe 10y agoI'm not talking about it being "secure by default". Just not being obviously insecure by default is more than enough...