Live data from Hacker News

Why you should never, ever, ever use MongoDB

cryto.net

1–10 of 33 posts

Re: Why you should never, ever, ever use MongoDB

#3
> .. has an atrociously poor response time to security issues - it took them two years to patch an insecure default configuration that would expose all of your data to anybody who asked, without authentication

I think that points a little unfair, yes a lot of users were compromised but none of them bothered to RTFM.

When I was learning Mongo and got a link to access the database, the literal first thing I asked was well how do I secure it? Taking the time to actually learn the fundamentals of a (then) new technology is never wasted!

Re: Why you should never, ever, ever use MongoDB

#6

> ... is not ACID-compliant All the other points are interesting, but I'm really tired of people bringing up this fact as a slam against NoSQL databases. Not everyone needs ACID compliance.

Not being that is one thing, but (at least in the past?) they implemented updates as non-atomic delete and insert, which is just crazy bad. It's one thing not to be ACID but having a query not return some entry at all because it's being concurrently updated is... an interesting design choice.

Edit: link https://blog.meteor.com/-654b6594a827

Re: Why you should never, ever, ever use MongoDB

#7
post #3

> .. has an atrociously poor response time to security issues - it took them two years to patch an insecure default configuration that would expose all of your data to anybody who asked, without authentication I think that points a little unfair, yes a lot of users were compromised but none of them bothered to RTFM. When I was learning Mongo and got a link to access the database, the literal first thing I asked was w…

Yes, I'm sure this "blame the user" attitude is how they justified not fixing the issue for so long.
Post reply on HN