A serious PostgreSQL security fix [LWN.net]

A serious PostgreSQL security fix

Posted Apr 4, 2013 22:46 UTC (Thu) by dlang (✭ supporter ✭, #313)
In reply to: A serious PostgreSQL security fix by cesarb
Parent article: A serious PostgreSQL security fix

> Yet another database system had a bug which was used to create a fast-propagating worm, which crashed parts of the Internet simply due to propagating too fast.

This one is especially important to note because this result indicated that many people DO have their databases directly accessible from the Internet.

This means that the comment earlier

> Agreed. Restricting connections to a specific network is DBA 101.
>
> You are just bad if you aren't doing that already.

misses the point.

It may be DBA 101, but so many people are doing it wrong that a DB exploit was able to crash parts of the Internet

(Log in to post comments)