Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1,175 Terabytes of Redis, MongoDB, Memcache, ElasticSearch Data Exposed Online

blog.binaryedge.io

Post reply on HN
Print view View original

1–6 of 6 posts

Re: 1,175 Terabytes of Redis, MongoDB, Memcache, ElasticSearch Data Exposed Online

#2

Post by nasalgoat »

This is a by-product of DevOps, where basic system administration techniques have to be re-discovered by developers the hard way because we've all decided system admins are redundant, plus the rise of "The Cloud" where things like security or reliability are secondary concerns.

Sort of like how NoSQL databases decided to throw out 50 years of database theory because it was old, the new generation is discovering that there were actual reasons for things like firewalls and authentication.

Re: 1,175 Terabytes of Redis, MongoDB, Memcache, ElasticSearch Data Exposed Online

#3

Post by rackgen »

nasalgoat wrote: post #2

This is a by-product of DevOps, where basic system administration techniques have to be re-discovered by developers the hard way because we've all decided system admins are redundant, plus the rise of "The Cloud" where things like security or reliability are secondary concerns. Sort of like how NoSQL databases decided to throw out 50 years of database theory because it was old, the new generation is discovering that…

Unfortunately DevOps doesn't mean letting go / replace admins with Developers - they still have to work with each other.

Particular case is with Docker security.

Re: 1,175 Terabytes of Redis, MongoDB, Memcache, ElasticSearch Data Exposed Online

#5

Post by koffiezet »

nasalgoat wrote: post #2

This is a by-product of DevOps, where basic system administration techniques have to be re-discovered by developers the hard way because we've all decided system admins are redundant, plus the rise of "The Cloud" where things like security or reliability are secondary concerns. Sort of like how NoSQL databases decided to throw out 50 years of database theory because it was old, the new generation is discovering that…

As a developer who transitioned into a hybrid sysadmin role, I can't really agree.

What this is, is lazy service developers letting security take a backseat over 'convenience', shifting all responsibility to their users. Surprise surprise, developers choosing "convenience" because we don't need user/passwords or some form of authentication have no clue about security.

Re: 1,175 Terabytes of Redis, MongoDB, Memcache, ElasticSearch Data Exposed Online

#6

Post by nasalgoat »

koffiezet wrote: post #5
nasalgoat wrote: post #2

This is a by-product of DevOps, where basic system administration techniques have to be re-discovered by developers the hard way because we've all decided system admins are redundant, plus the rise of "The Cloud" where things like security or reliability are secondary concerns. Sort of like how NoSQL databases decided to throw out 50 years of database theory because it was old, the new generation is discovering that…

As a developer who transitioned into a hybrid sysadmin role, I can't really agree. What this is, is lazy service developers letting security take a backseat over 'convenience', shifting all responsibility to their users. Surprise surprise, developers choosing "convenience" because we don't need user/passwords or some form of authentication have no clue about security.

The vast majority of developers I've worked with for the last 20 years think like that - convenience is always the primary motivator.
Post reply on HN