3 ms·
Redis and MySQL have started to lock down with random passwords now when installed, which is nice.
by astrodust 8y ago
Redis and MySQL have started to lock down with random passwords now when installed, which is nice.
- SXX 8y agoDid MySQL let you connect to instance from remote without password like ever? I used it first time like 16-17 years ago and don't remember anything like that. PS: And yeah I remember that famous password bypass bug from 2012, but that's all.
- astrodust 8y agoMySQL's "security model" used to be that it only bound to 127.0.0.1, but beyond that there was no passwords. I may be recalling incorrectly, but root did have access via `%` on most systems I used. I'm not sure if the reason MySQL was open with no password is MySQL's fault or the various distribution packagers, they have a lot of say in how its ultimately configured, but it wasn't a good look.
- SXX 8y agoI really can't recall if / when it's changed, but for many years you just wouldn't be able to connect to MySQL as root unless you set the password. Also if someone have access to your localhost it's almost always mean you're already in trouble no matter how well database configured.