News for hackers. Stuff that matters.

A comment on Finding MongoDB instances without any authentication. Parent comment

Re:Finding MongoDB instances without any authentication by rodgerd on Sunday July 19, 2015 @06:27PM (#9913080)
> These things are designed for use by people running them on servers that are not directly exposed to the internet.

Just as well internal attacks and fraud are never a thing, and pivoting attacks up a chain of successively less secure components never happens.

[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by coldtea on Sunday July 19, 2015 @11:18PM (#9913853)
For any given system you can saw me I can show you 100 things that could be extra hardened.

At some point you stop caring about security and start caring about convenience / practically.

[ Parent | on HN ]