2 ms·
I guess in their defense, databases were pretty famous for being a huge attack surface for many years.
by ip26 8y ago
I guess in their defense, databases were pretty famous for being a huge attack surface for many years.
- lowercased 8y agomis or poorly configured, yes. "sa" and no password on MSSQL, with direct connection to public internet - saw those for years. PostgreSQL/MySQL configured to only listen to localhost connections, and properly escaped/prepared queries running to them, with "minimally needed security access" credentials - haven't seen many problems with those (that were the fault of the database).
- rishav_sharan 8y agohand rolled file based storage solutions will likely be less secure than battle tested dbs.