zlacker

>>todsac+(OP)
> "None of the database guides I followed had warned me about the dangers of exposing a docker containerized database to the internet."

This prompts a reflection about, as an industry, we should make a better job in providing solid foundations.

When I check tutorials on how to drill in the wall, there is (almost) no warning about how I could lose a finger doing so. It is expected that I know I should be careful around power tools.

How do we make some information part of the common sense? "Minimize the surface of exposure on the Internet" should be drilled in everyone, but we are clearly not there yet

>>rpadov+Q2
That's an interesting take away, I just quoted the exact same line from the blob to a friend with my response being

> why didn't somebody stop me?!

I'm not sure if "the industry" has a problem with relaying the reality that: the internet is full of malicious people that will try to hack you.

My take away was closer to. The author knew better but thought some mix of 1) no one would provide incomplete information 2) I'm not a target 3) containers are magic, and are safe. I say that because they admit as much immediately following.

> Ofcourse I password protected it, but seeing as it was meant to be temporary, I didn't dive into securing it properly.