3 ms·
I don't buy that. Just did an apt-get install mysql-server and it let me install with a blank password (Ubuntu 16.04 MySQL Server 5.7)
by aioprisan 10y ago
I don't buy that. Just did an apt-get install mysql-server and it let me install with a blank password (Ubuntu 16.04 MySQL Server 5.7)
- morgo 10y agoIt is most likely appearing to work without a password because it is using socket authentication (vs tcp). See: http://mysqlserverteam.com/secure-by-default-in-mysql-5-7/ http://mysqlserverteam.com/secure-by-default-in-mysql-5-7/ If you want to double check, try 'mysql --protocol=tcp'.
- Sanddancer 10y agoThat's ubuntu screwing things up, not mysql. When you run the init manually -- mysqld --initialize -- it does require a password.
- aioprisan 10y agoSince we're just talking about defaults, you'd get an equally unsecured MySQL install on the latest and most popular AWS AMI today, as you would with old MongoDB installs.