Live data from Hacker News

MongoDB security notice

mongodb.com

101–110 of 198 posts

Re: MongoDB security notice

#101
This highlights risks of extreme consolidation - even if Atlas customers were not affected it is natural for them to be concerned after announcement overwhelming web site or support channels.

More independent MongoDB DBaaS providers is what would offer true redundancy in this case, though it is highly restricted due to SSPL license change.

Hopefully FerretDB will be successful building feasible alternative

Re: MongoDB security notice

#106

Almost decided to use MongoDB in a project for the first time. Kind of makes me unsure if it’s going to be the right choice.

No reason to use mongo imo

Agreed. It's an over optimization and most problems can be solved by traditional relational databases.

Re: MongoDB security notice

#107
post #97
post #83

Earlier quoted context omitted.

Yep, Jepsen has not only confirmed but later reconfirmed that MongoDB has for many years been on par with other NoSQL databases when it comes to transaction guarantees and data consistency.

Er...no.... "Jepsen Disputes MongoDB’s Data Consistency Claims" - https://www.infoq.com/news/2020/05/Jepsen-MongoDB-4-2-6/

Also, "2020-05-26: MongoDB identified a bug in the transaction retry mechanism [2] which they believe was responsible for the anomalies observed in this report; a patch is scheduled for 4.2.8." [1]

[1] https://jepsen.io/analyses/mongodb-4.2.6

[2] https://jira.mongodb.org/browse/SERVER-48307

Re: MongoDB security notice

#108

Nice and to the point, makes it clear that this is early, explains the current scope, tells us to expect a follow up as the information makes its way to them. I like this tbh and I hope people won't punish them for not including more info when this is clearly in the early days of investigation.

It was only DETECTED on the 13th, and they suspect had been going on 'for some time'. And basically not sure if user data was touched but they suspect or haven't provided it yet buly saying'NOT'. I want answers.

How does it feel to want? They are doing their due diligence currently.

Re: MongoDB security notice

#109
post #37
post #17

We are completely locked out of our Atlas account and the support portal right now. We Okta-auth with Mongo and all attempts to auth right now are failing with "The request contained invalid data." displayed on their login screen. Of course, the support portal requires you to auth to use it...to get help with auth failing. Anyone else seeing issues getting in to their dashboard? Edit: Auth started working for us and…

MongoDB employee posting: The login issues are unrelated to the security incident. We notified all of our customers and users concurrently resulting in a spike in login attempts. Please try again in a few minutes if you are still having trouble logging in. Please continue to monitor our alerts page: https://www.mongodb.com/alerts

I mean that totally sounds related (hah!) although I guess we all know what they mean
Post reply on HN