4 ms·
Maaaybe releasing tools with default unsecured configuration (with paid security addons for Kibana) should be shamed.
by arkh 7y ago
Maaaybe releasing tools with default unsecured configuration (with paid security addons for Kibana) should be shamed.
- hombre_fatal 7y agoElasticsearch is basically MongoDB in this regard.
- lm28469 7y agoIf megacorp #246 decide to use a free software I'm inclined to think they have more than enough money to pay engineers to secure it. It's not rocket science. It's like installing a mysql db and leaving the root password blank because "welp it's the default config".
- z3t4 7y agoIm pretty sure the mysql install wont let you set a blank root pw. And it will only listen on localhost by default.
- arkh 7y ago> they have more than enough money to pay engineers to secure it But they usually don't want to. It usually goes like that: we need some internal tool to do stats. All our people are busy on other projects. Let's get an intern to do that.