Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers

Y	Hacker News new \| ask \| show \| jobs

	Professional Ransomware Group Gets Involved,Infections Reach 28K MongoDB Servers (bleepingcomputer.com)
	15 points by RatherFunky 3450 days ago

1 comments

spongy_warbeast 3450 days ago

I'm not clear on why people would be exposing MongoDB on a public address?

This habit of database-like software (does Redis still not offer authentication?) treating authentication/authorization as a second-class citizen is odd.

I guess it has proven to be webscale though [1].

[1] https://www.youtube.com/watch?v=b2F-DItXtZs

link

bdcravens 3450 days ago

Redis has offered simple authentication for some time: https://redis.io/commands/auth

Redis generally isn't put forth a first-class member of a popular stack and featured in getting started tutorials in the same way that MongoDB has been.

link