Hacker News new | ask | show | jobs
by hitsurume 3038 days ago
Anyone run memcache outside their network to be able to get attacked like this? To be services like memcache, db, etc should all be internal use only and never allowed access from the outside.
2 comments

There's a lot of people install memcached without realising it listens on all addresses by default. If you install it and run it via whatever system your OS/distro uses, you'd never need to look at the man page so you wouldn't find this out.
We set them up that way and then someone who isn't so strong with networking opens it up to 'fix it'.