News for hackers. Stuff that matters.

A comment on Hacker deleted all of NewsBlur’s Mongo data and is now holding the data hostage. Parent comment

Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by jbuhbjlnjbn on Thursday June 24, 2021 @03:39AM (#27614905)
So the makers know of the security issue, but still leave it in by default? That's bad. Either fix the issue, or put warnings all over the place that cannot be missed to inform the user.

This is just what another poster commented on, sacrificing security for ease of use.

[ Parent | on HN ]
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by python273 on Thursday June 24, 2021 @04:37AM (#27615205)
Yeah, I reported it to DO support and suggested to add a warning, but seems like it was never added.

  DigitalOcean Support Thursday, March 15, 2018 9:53 PM
  Hello,
  
  Thank you very much for bringing this to our attention.
  
  I will create an internal escalation to our images team to review this. :)
  
  [...]
[ Parent | on HN ]