Great writeup! Writeups like these help everyone learn from each other's mistakes. > We had been relying on the firewall to provide protection against threats,

Great writeup! Writeups like these help everyone learn from each other's mistakes. > We had been relying on the firewall to provide protection against threats, but when the firewall silently failed, we were left exposed. > a change needs to be made as to which database users have permission to drop the database I think these two definitely highlight the importance of the always using the "layered onion" model of security. The combination of a firewall, a password, and a nuanced permissions model would have been sufficient to mitigate the attack, even if one or both of the others failed simultaneously.