Live data from Hacker News

Dear MongoDB users, we welcome you in Azure DocumentDB

azure.microsoft.com

61–70 of 119 posts

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#61

Earlier quoted context omitted.

Using a service means trusting a service. Nothing wrong with either, it's a decision up to the consumer. I am just saying, in this specific case, should you trust Microsoft with your data? That's all.

Well, do you trust Amazon, Google, Oracle or Rackspace? How about your local mum pop hosting provider? How is Microsoft different?

A track record of backdooring everything that can be backdoored.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#63
As someone that almost got bitten by MongoDB's lax auth defaults, I was happy to read that DocumentDB has enabled access control out of the box and no default username/password.

Also, there's a query playground if you want to try it out quickly: https://www.documentdb.com/sql/demo

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#64
post #50
post #39

Never looked at DocumentDB before. So if I get this straight, I can get a fully managed DB that can scale easily, but still have all the advantages and compatibility of a regular NoSQL like Mongo? I think that's a first, right?

Isn't it the same general idea as Amazon's DynamoDB?

DynamoDB isn't the same thing at all, its very limited and you need to use it in very specific ways. You certainly can't just use your current MongoDb data with it.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#65
post #45
post #41

Earlier quoted context omitted.

If you haven't looked it up for yourself in 10 days (when I have access to my PC) and if I remember this, I will send you some reference to read. But I if you really want to find out (which I doubt) just look it up yourself. It's so easy. I get the feeling you have some affiliation with MS?

> If you haven't looked it up for yourself in 10 days I have looked and I have not find any single case of Microsoft stealing Azure data. Or any big SaaS company like Amazon or Google doing that > But I if you really want to find out (which I doubt I'm not the one making unsupported claims without trying to provide any single example, perhaps the one that doesn't want to lok that their claims are wrong is not me > I…

Me neither :) check here again in 10 days.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#67
post #20

Earlier quoted context omitted.

It happens all the time, and also; when using proprietary software you never know, and that's the big issue (for me). I never use SaS or MS-products (I only use FOSS) so I don't fear for myself.

When has a SaaS operator stolen data hosted on their service?

Not agreeing with thread OP here, but I would certainly differentiate between "stealing" and "exploiting" (not in a security exploit sense). User data certainly gets exploited on _some_ SaaSs that would otherwise be unexploitable on your own stack.

I'm not saying this necessarily applies to compute engines or storage as a service or whatever, but something like gmail (SaaS) where your data is used to target ads at you could be considered exploiting your data. I would not put it beyond large companies to start considering doing the same on their storage-as-a-service offerings soon enough.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#69

As someone that almost got bitten by MongoDB's lax auth defaults, I was happy to read that DocumentDB has enabled access control out of the box and no default username/password. Also, there's a query playground if you want to try it out quickly: https://www.documentdb.com/sql/demo

It's important to be aware of security implications of leaving an unauthenticated server listening on the open internet (listening on 0.0.0.0 is not the default since some time now and if installing the rpm/deb package listening on 127.0.0.1 is the default option). Also never leave an internet facing server without a firewall.

As a SaaS it's not surprising DocumentDB got security configured, and it also won't be surprising when people lose data because they'll put '123456' as their password or commit their password to a public repository

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#70
post #19

Earlier quoted context omitted.

DynamoDB would be pretty close if it just allowed null values.

DynamoDB is effectively useless for querying, except perhaps for some sort of highly specialised application able to fit within the DynamoDB strange and arcane query model. What sort of database is effectively useless for querying? Also they need to ditch the really, really confusiong and limiting scaling model. For a database that advertises scaling as one of its key strengths, DynamoDB sure has a bad scaling story.

Databases in this category are some of the most popular ones in the world with good reason. The only way you can scale is to adopt a query-free architecture.

It feels tedious at first but once you develop some good habits and frameworks around denormalization it becomes easy to do that from day one.

Post reply on HN