Re: MySQL worm attacks Windows servers

From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Chris Travers <chris(at)travelamericas(dot)com>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, PostgreSQL advocacy <pgsql-advocacy(at)postgresql(dot)org>, pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: MySQL worm attacks Windows servers
Date: 2005-01-29 11:45:00
Message-ID: 20050129114500.GA18205@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-advocacy pgsql-general pgsql-www

On Sat, Jan 29, 2005 at 00:34:07 -0800,
Chris Travers <chris(at)travelamericas(dot)com> wrote:
>
> Maybe we should set the default authentication to only use TRUST on
> local sockets only. At least as of 7.4, the default was to trust
> network ports.

I believe the previous default was not to allow network connections
by default. For 8.0 only network connections from localhost are allowed
by default.

No one in their right mind is going to use trust authentication on
connections from random IP addresses. And in most cases they aren't
even going to allow connections from random IP addresses.

In response to

Browse pgsql-advocacy by date

  From Date Subject
Next Message Tom Lane 2005-01-29 15:44:13 Re: [GENERAL] MySQL worm attacks Windows servers
Previous Message Chris Travers 2005-01-29 08:34:07 Re: MySQL worm attacks Windows servers

Browse pgsql-general by date

  From Date Subject
Next Message Terry Lee Tucker 2005-01-29 12:34:01 Prompt User From a pgplsql Function
Previous Message Neil Conway 2005-01-29 10:23:06 Re: changing sort_mem on the fly?

Browse pgsql-www by date

  From Date Subject
Next Message Tom Lane 2005-01-29 15:44:13 Re: [GENERAL] MySQL worm attacks Windows servers
Previous Message Chris Travers 2005-01-29 08:34:07 Re: MySQL worm attacks Windows servers