Dumb MongoDB admins spew 600 TERABYTES of unauthenticated data
Darren Pauli reports:
Shodan hacker John Matherly says system administrators have exposed some 595.2 terabytes of data by using poorly-configured or un-patched versions of the popular MongoDB database.
eBay, Foursquare, and The New York Times are some of the prominent users of the open source MongoDB which is the most popular NoSQL database.
Matherly says the near 30,000 databases are exposed through the use of older versions of the platform that fail to bind to localhost.
“There’s a total of 595.2 TB of data exposed on the internet via publicly accessible MongoDB instances that don’t have any form of authentication,” Matherly says.
Read more on The Register.