4 ms·
> .. has an atrociously poor response time to security issues - it took them two years to patch an insecure default configuration that would expose all of your
by new_guy 8y ago
> .. has an atrociously poor response time to security issues - it took them two years to patch an insecure default configuration that would expose all of your data to anybody who asked, without authentication
I think that points a little unfair, yes a lot of users were compromised but none of them bothered to RTFM.
When I was learning Mongo and got a link to access the database, the literal first thing I asked was well how do I secure it? Taking the time to actually learn the fundamentals of a (then) new technology is never wasted!
- redhale 8y agoYes, I'm sure this "blame the user" attitude is how they justified not fixing the issue for so long.