3 ms·

MongoDB listens to localhost by default and provides a few warnings on startup if you don't have authentication enabled. See: https://blog.shodan.io/its-still-

MongoDB listens to localhost by default and provides a few warnings on startup if you don't have authentication enabled. See: https://blog.shodan.io/its-still-the-data-stupid/ https://blog.shodan.io/its-still-the-data-stupid/ I believe more of the blame should be put onto markets that provide images with insecure settings as MongoDB doesn't bind to the public interface by default and hasn't done so for years.

beatgammit 8y ago
Which is true for most popular systems, which I appreciate. I need to consciously decide to put something on an externally accessible port, which reminds me that it's time to make sure everything is secure (TLS, authentication, user privileges, etc).