3 ms·
"Misconfigured Elasticsearch cluster" Doubly so. No passwords _and_ it was exposed. There's no real reason to ever directly expose a database to the internet f
by outworlder 5y ago
"Misconfigured Elasticsearch cluster"
Doubly so. No passwords _and_ it was exposed. There's no real reason to ever directly expose a database to the internet for 0.0.0.0/0. Heck, there's no reason to expose to any routable address.
Yeah sure zero trust or whatever. Still, why even risk it? Layers.
- atonse 5y agoThis is what I came here to ask. How did this server even have a public IP?
- Saris 5y ago>There's no real reason to ever directly expose a database to the internet for 0.0.0.0/0 And open the host firewall too, there were quite a few layers of absolute incompetence involved here!
- deleted 5y ago[deleted]