Hacker News new | ask | show | jobs
by arkitaip 5496 days ago
Never thought about this. It's scary what even a basic search such as site:pastebin.com password username can return.
1 comments

Have you tried searching for "site:pastebin.com mysql_connect" ? That's even scarier. There's people that do post their database password and username publicly.
That is unlikely to matter - mysql and postsql doesn't allow connections from outside of localhost by default on Ubuntu (and properly other unixes as well).

So really, yeah if you already have local access you can pwn the box, but you have pretty much done that already.