New ‘Meow’ attack has deleted almost 4k unsecured databases

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by barkingcat on Sunday July 26, 2020 @07:31PM (#23960957)

online databases that can be written and deleted by anyone on the internet are no good at all. The data can't be trusted. Of course no welfare for you! All I do is to replace all the names with my name and I can take all the welfare in the whole country! Or for example, doing a search for names and replacing all female names with male names ... how can you trust a database like that?

Making decisions based on a writable database (to the world, and not just from data sources like census, etc) is utterly useless.

[ Parent | on HN ]

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by foxylad on Sunday July 26, 2020 @09:52PM (#23961628)

Consider Facebook/Twitter as anyone-writable databases. Your comments translate perfectly.

[ Parent | on HN ]

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by dredmorbius on Sunday July 26, 2020 @11:30PM (#23962016)

Facebook, Twitter, or even Mediawiki, don't permit any random IP address full database access. (Or had better not.)

Rather, for the first two, large numbers of agents may request access limited to a specific account, with limited capabilities granted.

Even Mediawiki, with an extraordinarily open access model (painfully so in most cases) has checks on extensive abuse, and gradations of permissions.

Suggesting that any of these are comparable to full DBA access as the Meow attack (with considerable merits0 targets suggests an exceeding poor grasp of distinctions or misreading of GP's comment.

You can do better.

[ Parent | on HN ]