4 ms·
You can set up the latest MySQL with a blank root password and open to the world as well. The lack of good security options is a 1.x-ism, now there are plenty o
by aioprisan 10y ago
You can set up the latest MySQL with a blank root password and open to the world as well. The lack of good security options is a 1.x-ism, now there are plenty of security mechanisms now https://docs.mongodb.com/v3.2/administration/security-checklist/ https://docs.mongodb.com/v3.2/administration/security-checkl...
- morgo 10y agoIt is much harder to do this with MySQL. The default is now a randomly generated password. You have to overwrite it with --initialize-insecure if you want to setup with a blank password.
- aioprisan 10y agoI don't buy that. Just did an apt-get install mysql-server and it let me install with a blank password (Ubuntu 16.04 MySQL Server 5.7)
- morgo 10y agoIt is most likely appearing to work without a password because it is using socket authentication (vs tcp). See: http://mysqlserverteam.com/secure-by-default-in-mysql-5-7/ http://mysqlserverteam.com/secure-by-default-in-mysql-5-7/ If you want to double check, try 'mysql --protocol=tcp'.
- Sanddancer 10y agoThat's ubuntu screwing things up, not mysql. When you run the init manually -- mysqld --initialize -- it does require a password.
- aioprisan 10y agoSince we're just talking about defaults, you'd get an equally unsecured MySQL install on the latest and most popular AWS AMI today, as you would with old MongoDB installs.