3 ms·

But if the database doesn't run on local host, the credentials to connect do it still have to.

• chacham15 12y ago
  Those credentials are only to a specific database user though. That user might not have access to credit card tables for instance. Therefore, even if the current exploit provides root access, those numbers might still be safe. Furthermore, it is a much simpler matter to revoke a users credentials than to deal with a machine which has been compromised in potentially numerous ways.