> As a developer I want to have tools that make my life easier to - you guessed it - develop. Enabling unnecessary secure defaults that either hinder or don't a

> As a developer I want to have tools that make my life easier to - you guessed it - develop. Enabling unnecessary secure defaults that either hinder or don't apply to my use case is silly. The problem is a lot of these insecure defaults will be rolled to production by a "developer" only to get hacked later. Because the marketing and friction-less dev is more important then sane default security > Over a quarter of MongoDB databases left open to the internet have been ransacked by online extortionists.[0] They "forgot"/"did not know" the password is not set. This was for db tech. Now you want your average dev, who is getting "forced" to use docker more and more. To know how to setup container tech secure? But hey, I need to get this on my CV and it is just click click install. So what can go wrong? [0]: http://www.zdnet.com/article/mongodb-ransacked-now-27000-databases-hit-in-mass-ransom-attacks/ http://www.zdnet.com/article/mongodb-ransacked-now-27000-dat...