News for hackers. Stuff that matters.

A comment on Finding MongoDB instances without any authentication.

Re:Finding MongoDB instances without any authentication by jakobdabo on Sunday July 19, 2015 @12:44PM (#9911742)
Can't malware/bots use these databases for communication?
[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by captn3m0 on Sunday July 19, 2015 @01:17PM (#9911898)
Yes, but then you build your own layer of auth on top of it. Signed messages should work fine, though. Its an interesting idea, for sure.
[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by tracker1 on Sunday July 19, 2015 @05:34PM (#9912907)
Hehe, for that matter it'd make a hell of a means of distribution for illicit materials (pirate software/movies)...

Think db nodes to find/query for torrents...

[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by mentat on Monday July 20, 2015 @02:29PM (#9918007)
Open ftp uploads all over again...
[ Parent | on HN ]