Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Other Discussions
  3. The Insider News
  4. Ransom note replaces 2.1M customer records on open MongoDB

Ransom note replaces 2.1M customer records on open MongoDB

Scheduled Pinned Locked Moved The Insider News
mongodbcomsecuritysalesannouncement
7 Posts 5 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    K Offline
    Kent Sharkey
    wrote on last edited by
    #1

    Bleeping Computer[^]:

    Hackers on the prowl for unsecured databases found a publicly accessible MongoDB instance and replaced the almost 1.2 million sensitive records it stored with a ransom note.

    NoSQL, NoSecurity

    R M 2 Replies Last reply
    0
    • K Kent Sharkey

      Bleeping Computer[^]:

      Hackers on the prowl for unsecured databases found a publicly accessible MongoDB instance and replaced the almost 1.2 million sensitive records it stored with a ransom note.

      NoSQL, NoSecurity

      R Offline
      R Offline
      Rob Grainger
      wrote on last edited by
      #2

      To be fair, the fault in this case seems to be nothing to do with MongoDB. If I left SQL Server unsecured on a public facing network. I suspect it would be compromised pretty quickly too.

      "If you don't fail at least 90 percent of the time, you're not aiming high enough." Alan Kay.

      N M 2 Replies Last reply
      0
      • R Rob Grainger

        To be fair, the fault in this case seems to be nothing to do with MongoDB. If I left SQL Server unsecured on a public facing network. I suspect it would be compromised pretty quickly too.

        "If you don't fail at least 90 percent of the time, you're not aiming high enough." Alan Kay.

        N Offline
        N Offline
        Nelek
        wrote on last edited by
        #3

        Rob Grainger wrote:

        To be fair, the fault in this case seems to be nothing to do with MongoDB.

        You are right, the issue is between the chair and the keyboard.

        M.D.V. ;) If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about? Help me to understand what I'm saying, and I'll explain it better to you Rating helpful answers is nice, but saying thanks can be even nicer.

        1 Reply Last reply
        0
        • K Kent Sharkey

          Bleeping Computer[^]:

          Hackers on the prowl for unsecured databases found a publicly accessible MongoDB instance and replaced the almost 1.2 million sensitive records it stored with a ransom note.

          NoSQL, NoSecurity

          M Offline
          M Offline
          Mark_Wallace
          wrote on last edited by
          #4

          MongoDB is just a pawn in the game of data storage.

          I wanna be a eunuchs developer! Pass me a bread knife!

          M 1 Reply Last reply
          0
          • R Rob Grainger

            To be fair, the fault in this case seems to be nothing to do with MongoDB. If I left SQL Server unsecured on a public facing network. I suspect it would be compromised pretty quickly too.

            "If you don't fail at least 90 percent of the time, you're not aiming high enough." Alan Kay.

            M Offline
            M Offline
            Mark_Wallace
            wrote on last edited by
            #5

            True, but shouldn't the default configuration be a little safer, rather than completely open?

            I wanna be a eunuchs developer! Pass me a bread knife!

            1 Reply Last reply
            0
            • M Mark_Wallace

              MongoDB is just a pawn in the game of data storage.

              I wanna be a eunuchs developer! Pass me a bread knife!

              M Offline
              M Offline
              MarkTJohnson
              wrote on last edited by
              #6

              I wonder how "triggered" today's snowflakes would be if forced to watch that movie and what would offend them the most?

              M 1 Reply Last reply
              0
              • M MarkTJohnson

                I wonder how "triggered" today's snowflakes would be if forced to watch that movie and what would offend them the most?

                M Offline
                M Offline
                Mark_Wallace
                wrote on last edited by
                #7

                "Nobody move, or..." Betcha. They're not snowflakes, though; they're wankers who want to force their way of life on others. Every political affiliation and religion has plenty of them within their membership; they're just too stupid to realise that not everyone can believe or want exactly the same things that they do. "Live and let live" is probably the second-best advice that was ever given to anyone by anyone. * The best advice ever given being "Don't cancel Firefly, you bloody morons!"

                I wanna be a eunuchs developer! Pass me a bread knife!

                1 Reply Last reply
                0
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                • Login

                • Don't have an account? Register

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • Popular
                • World
                • Users
                • Groups