Thousands of MongoDB databases have no password

[a_5mith]

http://cispa.saarland/wp-content/uploads/2015/02/MongoDB_documentation.pdf

Make sure you apply a password to your databases if you haven't.

[Scuzz]

@a_5mith I'm sure MongoDB defaults to local access only?

[julian]

@Scuzz Depending on the package distributor's default setting, but yes, it should default to a sensible localhost access only.

Redis is the same -- Ubuntu binds to localhost only, whereas if compiled from source, will listen on all interfaces, which is... erm... not as good.