Were you using Docker raw? No orchestration? If so what's the advantage to dockerizing your data stores
NewsBlur was using Ansible. https://www.ansible.com/use-cases/orchestration
A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
21–30 of 275 posts
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#22Off-topic but I had never seen the Tor exit node's default text before. Pretty hilarious that it states Tor provides privacy to people need it most: "average computer users." Yep, that's definitely who is using Tor...
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#23Earlier quoted context omitted.
I don't know why this is being downvoted. Multiple overlapping layers of security would have given newsblur a backup in case of accidental "footguns". Unauthenticated mongodb instances are a pretty common problem - it's why a "script kiddie" was so successful.
> I don't know why this is being downvoted. Multiple overlapping layers of security would have given newsblur a backup in case of accidental "footguns". Security specialist here. Startups are built by generalists. Good decisions were made here which made other defense-in-depth considerations not as critical when reconciled with go-to-market needs. If every generalist focused on every security risk in their product, t…
So what you are saying is they should have had a password since that would not slow them down?
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#24I can't help but be reminded that zero trust architecture for security has been a thing for at least a decade, and that the 2004 Jericho Forum concluded that perimeter security was illusory, more akin to a picket fence than a wall.
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#25Crap like this is why I dont run docker. I'm glad RedHat took a principled stance on it and dropped it. Podman doesn't punch holes you didn't ask for in your firewall. What a ludicrous anti-feature.
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#26Earlier quoted context omitted.
I don't know why this is being downvoted. Multiple overlapping layers of security would have given newsblur a backup in case of accidental "footguns". Unauthenticated mongodb instances are a pretty common problem - it's why a "script kiddie" was so successful.
> I don't know why this is being downvoted. Multiple overlapping layers of security would have given newsblur a backup in case of accidental "footguns". Security specialist here. Startups are built by generalists. Good decisions were made here which made other defense-in-depth considerations not as critical when reconciled with go-to-market needs. If every generalist focused on every security risk in their product, t…
defense in depth is about as basic as it gets, even for generalists
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#27Alternative headline: how my unauthenticated database ended up on the public web.
Exactly, like a bank that doesn’t lock it’s vault because the front door is locked.
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#28I can't help but be reminded that zero trust architecture for security has been a thing for at least a decade, and that the 2004 Jericho Forum concluded that perimeter security was illusory, more akin to a picket fence than a wall.
Everyone embracing immutable server configuration would help too. We give so many tools like docker complete trust to touch configuration and do the right thing. Sometimes it bites us though. In a perfect world you'd see docker try to change iptables and it fail, then investigate what's up and understand that a specific change has to be allowed and all the implications of that change.
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#29I'm a bit confused here about how this was a docker issue. Initially I thought there was some stuff happening with uPnP with a router/gateway of some sort (https://en.wikipedia.org/wiki/Universal_Plug_and_Play)
If I run a docker container on my macbook and expose a port over 0.0.0.0 (docker run -d -p 8080:8080 nginx) and it's available on my LAN network, how does it get exposed over the internet? Unless there's a rule in my router/gateway which does the port forwarding, it's not possible.
I wish the author goes into a bit more detail onto how his setup was vulnerable rather than bringing up an old Github Issue.
Re: A Docker footgun led to a vandal deleting NewsBlur's MongoDB database
#30The mistake here is a MongoDB that didn't require authentication, not that docker's clunky iptables setup exposed it to the internet. Relying solely on a host-based firewall for access control is, for reasons which must now be obvious, admin incompetence. They are responsible for securing the containers. They didn't. Your services should be using authentication even if they are only bound to localhost.
Agree that authentication should be table stakes, though I would argue that the actual mistake is that the MongoDB application/docker container was on a host/VM with a network interface on the public internet.