News for hackers. Stuff that matters.

A comment on A picture got my PostgreSQL database to start mining Monero. Parent comment

Re:A picture got my PostgreSQL database to start mining Monero by cryptonector on Monday March 19, 2018 @11:08AM (#16618909)
Well, for one thing, inserting into pg_catalog tables without DDLs should require privilege and be audited.

Secondly, things like lo_export() should be disabled by default.

[ Parent | on HN ]
Re:A picture got my PostgreSQL database to start mining Monero by anarazel on Monday March 19, 2018 @02:37PM (#16621608)
> Well, for one thing, inserting into pg_catalog tables without DDLs should require privilege and be audited.

It does require privileges.

> Secondly, things like lo_export() should be disabled by default.

It's superuser only.

[ Parent | on HN ]
Re:A picture got my PostgreSQL database to start mining Monero by postila on Monday March 19, 2018 @08:02PM (#16624651)
things like superuser should be disabled by default (only DBA needs superuser access, not anybody else).
[ Parent | on HN ]