4 ms·
Does elasticsearch have no authentication by default like mongodb or did someone deliberately make it public?
by cm2187 7y ago
Does elasticsearch have no authentication by default like mongodb or did someone deliberately make it public?
- leetbulb 7y agoNo authentication by default.
- tyingq 7y agoFixed now, but this was a common sequence of events at one time: https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-cluster/71310/18 https://discuss.elastic.co/t/ransom-attack-on-elasticsearch-...
- cm2187 7y agoMy god, it looks even worse than no security by default. It gives you a false sense of security then unlocks in your back when you are not watching.