Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MongoDB security notice

mongodb.com

Post reply on HN
Print view View original

51–60 of 198 posts

Re: MongoDB security notice

#52

Post by Jonovono »

goenning wrote: post #38

I never used/tried MongoDB, what are the reasons people choose MongoDB over other DBs?

It's a really great alternative to firebase for mobile apps. Works pretty nicely with Realm so you get offline first db with powerful syncing. All the benefits of realm on the edge device with the power of the mongo platform. I dismissed mongo atlas for years because "mongo", until I finally gave it a chance. Overall been pretty pleased.

Re: MongoDB security notice

#53

Post by tgv »

goenning wrote: post #38

I never used/tried MongoDB, what are the reasons people choose MongoDB over other DBs?

I use it on-prem (well, on a VPS). It stores JSON documents, and it's easy to work with. If your data looks like a tree, it works pretty well, also for large documents. If you depend on relations between documents, you're better off with an SQL database, but note that for many cases --I'd say practically all mundane cases-- there's really no need for relations the SQL way. MongoDB also does relations, but a bit more convoluted.

Re: MongoDB security notice

#58

Post by iLoveOncall »

bossyTeacher wrote: post #54
goenning wrote: post #38

I never used/tried MongoDB, what are the reasons people choose MongoDB over other DBs?

Mongo is the main nosql choice. Mongo is great if you think a flexible schema is good. Mongo is not great if you think a flexible schema is bad. That sums it up

This is too reductive, you can essentially have flexible schemas with most modern relational databases and without the downsides of document-based DBs.

In 99% of the cases, even if you need a flexible schema, PostgreSQL will remain the best choice.

Re: MongoDB security notice

#59

Post by mtremsal »

salil999 wrote: post #50
ThePowerOfFuet wrote: post #30

Earlier quoted context omitted.

You really should not be using SMS for 2FA.

For my own knowledge, if the options were between using SMS for 2FA or not having 2FA at all then what is better? I've heard mixed things about this.

SMS 2FA is better than no MFA at all, despite the very valid concerns about SMS. It at least protects against credential stuffing and similar automated attacks.

Re: MongoDB security notice

#60

Post by salil999 »

sgift wrote: post #51
goenning wrote: post #38

I never used/tried MongoDB, what are the reasons people choose MongoDB over other DBs?

[flagged]

I see this Jepsen link posted all the time. People: PLEASE don't use outdated software. MongoDB has made mistakes and they are public about their data issues on https://www.mongodb.com/alerts. MongoDB 4.2.6 is old and I believe it's approaching EoL based on https://www.mongodb.com/support-policy/lifecycles

I'm not going to push for you to use MongoDB but am merely trying to provide some context around that Jepsen analysis.

Post reply on HN