Hacker News Reader

Comment by seabrookmx | Hacker News Reader

This is a bit click-bait-y. Mongo gets a lot of flack, but this really applies to any database.

Author here: I completely agree that it applies to any database and I tried to mention it in the article. The reason I wrote about MongoDB is:

- I wrote about it before and could compare results from my previous post

- It's popular and there are a lot of public instances of it

- MacKeeper exposed 13 million user accounts through their public MongoDB instance

And I actually wrote a follow-up post on Memcached to highlight the same issue: https://blog.shodan.io/memory-as-a-service/

Unfortunately that's not how your article has been interpreted, especially not in the reddit thread which has (predictably) divulged into an incoherent MongoDB hate-fest.

The author doesn't owe mongoDB a PR whitewash.

I'm not talking about what the author wrote, I'm talking about the 500 posts which entire take away was 'mongo is retarded'. Reread what I wrote.

I don't understand how this is "click-bait-y." The link title says it just like it is. It is an article about Mongo databases publicly exposed on the internet.

Also, the author stresses that this problem is not unique to mongo.

https://github.com/postgres/postgres/blob/master/src/backend...

Believe it or not but this is one of the top reason people who tried postgresql got a bad first experience and skipped to mysql, granted they probably were not highly skilled in databases or in basic networking and security or just couldn't bother to look up how to fix that weird "connection refused from non localhost ips" error.

The post is a little bit shallow, but the author does recognize exactly this point at the end of the post.

Reply on news.ycombinator.com