Personal and social information of 1.2B people discovered in data leak

Re:Personal and social information of 1.2B people discovered... by zerocrates on Friday November 22, 2019 @05:20PM (#21610737)

That MySQL stuff is all quite recent... up until 5.7 (?, one of the most recent releases, anyway) there's no root password by default and running `mysql_secure_installation` is a common (but not mandatory) step to, well, secure the installation and set a root password. I think MariaDB still works this way? Not sure.

I'm not aware of "bind to localhost" being the default, either. The skip-networking setting to only allow local socket connections is definitely not the default, and I'm pretty sure the default is still to bind to all interfaces.

[ Parent | on HN ]

Re:Personal and social information of 1.2B people discovered... by z3t4 on Saturday November 23, 2019 @08:36AM (#21614027)

I installed mySQL a couple of months ago on a Ubuntu server, and got asked to set a root password. I've also installed mySQL many times on Windows. Secure install is the default. And it doesn't annoy me a bit. I like my software to be secure by default.

[ Parent | on HN ]