MongoDB and ElasticSearch Clusters WIPED! The Meow attack and how Backend Engineers can prevent it
The Backend Engineering Show with Hussein Nasser - A podcast by Hussein Nasser
Categorie:
Bob Diachenko discovered an attack on MongoDB and ElasticSearch clustered that are unsecured. We discuss this attack in detail and how we as Backend Engineers can secure our databases. 0:00 The Meow Attack again MongoDB & ElasticSearch 1:43 How does it work? 5:00 Scope of the Attack 6:00 How Backup & MVCC Help 8:30 What does “Unsecure” mean? 11:00 Protecting Database Instances