4 ms·
No matter what your defaults are, if a sysadmin doesn't understand that some software is OK to connect to a public-internet addressable interface while other so
by andreyf 10y ago
No matter what your defaults are, if a sysadmin doesn't understand that some software is OK to connect to a public-internet addressable interface while other software is not, their shit is going to get hacked (or, as in this case, accessed).
This is the equivalent of leaving your data in a file cabinet in your lobby and being surprised someone took it. The answer isn't to add self-locking little office locks to the file cabinets by default, it's to educate folks that this is a file cabinet that's designed to be inside the office, not in a publicly accessible place.
- jldugger 10y agoNetwork oriented software created after 2000 has zero excuse for allowing unauthenticated writes from the general internet by default.
- stouset 10y agoTell that to redis. No, seriously. Please. I've been banging that drum for years.
- andreyf 10y agoAlso, MySQL [1]. Are you sure that you're right and all these major db projects are wrong? 1. note the default value of "bind to *": http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_bind-address http://dev.mysql.com/doc/refman/5.7/en/server-options.html#o...
- StavrosK 10y agoRedis doesn't listen on localhost by default? I've deployed countless redis instances and that's news to me. Did Debian/Ubuntu change the default default?
- andreyf 10y agoWhat about the "this is the most common setting used by our clients"? Is that not a good "excuse" for being the default?
- jldugger 10y agoHere's a semi-sane default for people who want the simple case to just work: - require authentication for remote network connections - allow r/w from any local connection, tcp or unix Random devs installing mongo on their workstation will Just Work, but won't expose customer data to the internet.
- hueving 10y agoNo, it's the equivalent of selling a car that doesn't require the key to be present to start by default. If the software is insecure out of the box, that's crap vendor behavior.
- saurik 10y agoI think it is more like the equivalent of a refrigerator without a lock. You aren't supposed to keep a refrigerator outside your locked home. You can and do see people fit refrigerators with locks for that purpose, but when you do that there are tons of other things you will need to do, and I don't think it is optimal for the refrigerator people to try to solve them. (That said, as the issue here is "localhost or 0.0.0.0", I don't think keys or locks are good analogies: more like, when they come and install your refrigerator, they should probably install it inside, as that's the place it should be used, but surprisingly if you don't tell them this ahead of time they install it outside, so you can get access to it more quickly from your car, which is insane.)
- vacri 10y agoThere is plenty of heavy industrial machinery that doesn't have keys - the canonical example is a jumbo jet.