4 ms·
Docker doesn’t expose ports by default. It only bypasses your firewall if you choose to explicitly publish a port. OP explicitly forwarded a port in Docker to
by harrall 2y ago
Docker doesn’t expose ports by default. It only bypasses your firewall if you choose to explicitly publish a port.
OP explicitly forwarded a port in Docker to their home network.
OP explicitly forwarded their port on their router to the Internet.
OP may have ran Postgres as root.
OP may have used a default password.
OP got hacked.
Imagine having done these same steps on a bare metal server.
- phoronixrly 2y agoI do imagine: 1. postgres would have a sane default pg_hba disallowing remote superuser access. 2. postgres would not be running as root. 3. postgres would not have a default superuser password, as it uses peer authentication by default. 4. If ran on a redhat-derived distro, postgres would be a subject to selinux restrictions. And yes, all of these can be circumvented by an incompetent admin.