News for hackers. Stuff that matters.

A comment on Personal and social information of 1.2B people discovered in data leak. Parent comment

Re:Personal and social information of 1.2B people discovered... by staticassertion on Friday November 22, 2019 @06:41PM (#21611259)
Other databases learned that not requiring a user/password upon install is completely irresponsible. ES and other dbs need to catch up ASAP, it's ridiculous.

Documentation is not security. If you need to "RTFM" to not be in an ownable state it's ES's fault.

[ Parent | on HN ]
Re:Personal and social information of 1.2B people discovered... by jwandborg on Friday November 22, 2019 @06:56PM (#21611362)
Trusting software you install to be secure is ridiculous and completely irresponsible, especially if you did not pay for someone else to take the blame.

The only thing you can do to secure your software is to restrict its communication channels. Once you've secured the communication channels, the software auth is decorative at best.

[ Parent | on HN ]
Re:Personal and social information of 1.2B people discovered... by staticassertion on Friday November 22, 2019 @07:12PM (#21611451)
That doesn't absolve ES of providing basic security defaults.
[ Parent | on HN ]