3 ms·
From my experience, Mongo DB's entire raison d'etre is "laziness". * Don't worry about a schema. * Don't worry about persistence or durability. * Don't worry
by petcat 10mo ago
From my experience, Mongo DB's entire raison d'etre is "laziness".
* Don't worry about a schema.
* Don't worry about persistence or durability.
* Don't worry about reads or writes.
* Don't worry about connectivity.
This is basically the entire philosophy, so it's not surprising at all that users would also not worry about basic security.
- aragilar 10mo agoNot only that, but authentication is much harder than it needs to be to set up (and is off by default).
- winrid 10mo agoAlthough interestingly, for all the mongo deployments I managed, the first time I saw a cluster publicly exposed without SSL was postgres :)
- ddtaylor 10mo agoUltimate webscale!
- Thaxll 10mo agoMost of your points are wrong. Maybe only 1- is valid'ish.
- morshu9001 10mo agoI'm sure there are publicly exposed MySQLs too
- zX41ZdbW 10mo agoThere are many more exposed MySQLs than MongoDBs: https://www.shodan.io/search?query=mongodb https://www.shodan.io/search?query=mongodb https://www.shodan.io/search?query=mysql https://www.shodan.io/search?query=mysql https://www.shodan.io/search?query=postgresql https://www.shodan.io/search?query=postgresql But this must be proportional to the overall popularity.
- senderista 10mo agoTo the extent that any of this was ever true, it hasn’t been true for at least a decade. After the WiredTiger acquisition they really got their engineering shit together. You can argue it was several years too late but it did happen.
- cyberpunk 10mo agoI got heavily burned pre-wiredtiger and swore to never use it again. Started a new job which uses it and it’s been… Painless, stable and fast with excellent support and good libraries. They did turn it around for sure.