Live data from Hacker News

MongoDB security notice

mongodb.com

21–30 of 198 posts

Re: MongoDB security notice

#21
post #7
post #4

Irrelevant but curious if MongoDB is still being picked up for Greenfield projects given it's licensing.

What’s wrong with licensing?

Encryption at rest is not supported in the community/free version of MongoDB.

We built an email service (IMAP support added a month ago) and wrote a WebSocket to SQLite layer to solve our encryption at rest needs for storage.

See our deep dive at https://forwardemail.net/blog/docs/best-quantum-safe-encrypt... for insight.

Re: MongoDB security notice

#25
post #17

We are completely locked out of our Atlas account and the support portal right now. We Okta-auth with Mongo and all attempts to auth right now are failing with "The request contained invalid data." displayed on their login screen. Of course, the support portal requires you to auth to use it...to get help with auth failing. Anyone else seeing issues getting in to their dashboard? Edit: Auth started working for us and…

Same here with Google SSO

Re: MongoDB security notice

#26
post #7

Earlier quoted context omitted.

What’s wrong with licensing?

Encryption at rest is not supported in the community/free version of MongoDB. We built an email service (IMAP support added a month ago) and wrote a WebSocket to SQLite layer to solve our encryption at rest needs for storage. See our deep dive at https://forwardemail.net/blog/docs/best-quantum-safe-encrypt... for insight.

Really? How many open source databases do you offer? Some may say it’s not right for randos to complain when you give something away and they complain that it’s missing basics. I just happy someone else wrote most of what I need and I can extend it if needed.

Re: MongoDB security notice

#27
post #20

Earlier quoted context omitted.

upstream request timeout when trying to sign in

On our side, Okta is saying the auth is good. I'm trying my personal account as well and it's telling me MFA isn't set up (it is) and it's making me go through the MFA setup flow again. All attempts to setup another 2FA code in 1Password or to get even an SMS code sent to my phone are failing. Edit: Personal account with a TOTP 2FA is working again now as well. This is feeling worse than they're letting on to.

Sign in now worked once and sent me into the MFA setup loop but it failed.

Re: MongoDB security notice

#28

Are they doing well? Seems like the hype has kind of died down.

Recent 7.0.0 version has dropped old and introduced quite broken new query planner. Caused a lot of our queries to miss. We’ve had the displeasure to work with the support on multiple related issues.

Re: MongoDB security notice

#30
post #20

Earlier quoted context omitted.

upstream request timeout when trying to sign in

On our side, Okta is saying the auth is good. I'm trying my personal account as well and it's telling me MFA isn't set up (it is) and it's making me go through the MFA setup flow again. All attempts to setup another 2FA code in 1Password or to get even an SMS code sent to my phone are failing. Edit: Personal account with a TOTP 2FA is working again now as well. This is feeling worse than they're letting on to.

You really should not be using SMS for 2FA.
Post reply on HN