News for hackers. Stuff that matters.

A comment on I discovered thousands of open databases on AWS. Parent comment

Re:I discovered thousands of open databases on AWS by new_guy on Monday January 31, 2022 @08:28AM (#30147638)
When I learnt Mongo, that was literally the first thing I had to lookup because the docs didn't explain it, or even mention it was insecure.

But once it was set up it gives you a login, and I realized it was completely public, anyone could just login there. It's a horrible default to have, but it's weird more people didn't realise how insecure it was.

[ Parent | on HN ]
Re:I discovered thousands of open databases on AWS by MaBeuLux88 on Monday January 31, 2022 @03:17PM (#30153654)
This doc page has been up for as long as I can remember: https://docs.mongodb.com/manual/administration/security-chec.... It's also stated in the production notes: https://docs.mongodb.com/manual/administration/production-no....
[ Parent | on HN ]