4 ms·
Realistically, insecure defaults are part of the reason Mongo was adopted in the first place. Other databases are a hellscape of configuration, meanwhile Mongo
by Pxtl 10y ago
Realistically, insecure defaults are part of the reason Mongo was adopted in the first place. Other databases are a hellscape of configuration, meanwhile Mongo is starting to get work done from the moment it's installed.
Security and usability are always at odds. If you make security a pain, people will give up on security. Mongo is the ultimate manifestation of that principle. Developers were driven to Mongo by opaque and painful admin tasks.
- Florin_Andrei 10y agoYes, but there is such a thing as minimum viable security. You know, that magical place where you're one step above absolute zero.
- rosser 10y agoToo bad. If you put something on the internet, it's on you to keep it secure.
- camus2 10y ago> Security and usability are always at odds. No they are not. Start the server for the first time? ask users to create an admin account, then display a notice saying they didn't configure SSL or something else properly. Problem solved. Each time the server is started and the setup isn't secure enough, display a message. That's how you do it.
- fuzzy2 10y ago> Security and usability are always at odds. Absolutely not. How does having to log in affect usability of a system itself in any way? Security and convenience are often (but not always!) at odds.
- scott_karana 10y agoA "hellscape of configuration"? `apt-get install mysql-server` makes you enter a "root" password out of the box. `apt-get install postgresql` create a local user `postgres` with access the local database. Both bind to only localhost by default. Those sound like easy, reasonable defaults to me. (And this isn't exclusive to Debian-likes: RHEL almost certainly shares the exact same benefits)
- StavrosK 10y agoI don't know, to me, these sound like things you have to do for those dinosaur databases, along with their antiquated notions of "authentication" and "actually persisting data you confirmed". Who has time for that?
- lacampbell 10y ago`apt-get install postgresql` create a local user `postgres` with access the local database. Does it!? I'm sure I've had to do that myself.
- fulafel 10y agoYes.
- kalleboo 10y agoJust making it bind to localhost and not 0.0.0.0 would have zero impact on out-of-the-box usability and would prevent 99% of these drive-by hackings.