Hacker News new | ask | show | jobs
by sannee 3079 days ago
As MySQL uses a custom binary protocol, it should be fine. On the other hand, anything using a line-based protocol is in danger.

https://bouk.co/blog/hacking-developers/

So, if you have, say, telnet bound to localhost without a password, you are not safe (modern browser would drop the response as it's not valid HTTP, but with telnet you don't exactly care anyway).