3 ms·
MySQL's "security model" used to be that it only bound to 127.0.0.1, but beyond that there was no passwords. I may be recalling incorrectly, but root did have a
by astrodust 8y ago
MySQL's "security model" used to be that it only bound to 127.0.0.1, but beyond that there was no passwords. I may be recalling incorrectly, but root did have access via `%` on most systems I used.
I'm not sure if the reason MySQL was open with no password is MySQL's fault or the various distribution packagers, they have a lot of say in how its ultimately configured, but it wasn't a good look.
- SXX 8y agoI really can't recall if / when it's changed, but for many years you just wouldn't be able to connect to MySQL as root unless you set the password. Also if someone have access to your localhost it's almost always mean you're already in trouble no matter how well database configured.