this post was submitted on 29 Dec 2025
326 points (99.7% liked)

Programmer Humor

28421 readers
2379 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
Feyter@programming.dev
anzo@programming.dev
BurningTurtle@programming.dev
pylapp@programming.dev
326
MongoBleed is web scale (infosec.pub)
submitted 2 weeks ago* (last edited 2 weeks ago) by qaz@lemmy.world to c/programmer_humor@programming.dev
20 comments fedilink hide all child comments
 

There are over 213k+ potentially vulnerable internet-exposed MongoDB instances, ensuring that this exploit is web scale.

MongoDB is webscale

all 22 comments
sorted by: hot top controversial new old
[–] Deceptichum@quokk.au 78 points 2 weeks ago (1 children)

MongoDB the company who drives its employees to suicide?

[–] qaz@lemmy.world 24 points 2 weeks ago (2 children)

What are you referring to?

[–] Deceptichum@quokk.au 107 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

Woman took her own life after $35B tech company cancelled health benefits during mental health leave, parents claim

The headline misses that they fired her after they demanded she return to the office and she begged for a bit more unpaid mental health leave.

[–] qaz@lemmy.world 51 points 2 weeks ago

That's fucked up

[–] flambonkscious@sh.itjust.works 4 points 2 weeks ago

Thanks for the not-linked url. MSN is gross, too but a lot less so

[–] kubica@fedia.io 72 points 2 weeks ago

Try to stay positive, think of all the software still using MongoDB that never got updated after 2016.

[–] BlameTheAntifa@lemmy.world 52 points 2 weeks ago (2 children)

This is small potatoes for a company that murders it’s employees in cold blood.

[–] MashedTech@lemmy.world 15 points 2 weeks ago

HOLY FUCKING SHIT

[–] Agent641@lemmy.world 41 points 2 weeks ago (1 children)

One day I'll learn what webscale means, but it is not this day.

[–] kibiz0r@midwest.social 36 points 2 weeks ago (2 children)

Turns out we were better off piping data to /dev/null

[–] qaz@lemmy.world 17 points 2 weeks ago

For GDPR compliance, absolutely

[–] probable_possum@leminal.space 8 points 2 weeks ago

/dev/null ACE incoming soon. ;)

[–] Thorry@feddit.org 29 points 2 weeks ago (3 children)

MongoDB is normally not public facing right?

[–] qaz@lemmy.world 37 points 2 weeks ago

It shouldn't be

[–] enumerator4829@sh.itjust.works 25 points 2 weeks ago

How else would you be webscale?

[–] anton@lemmy.blahaj.zone 7 points 2 weeks ago

The default configuration in 2017 was public write access, but those databases where taken over long ago.

[–] goatinspace@feddit.org 15 points 2 weeks ago (1 children)

[–] sukhmel@programming.dev 8 points 2 weeks ago

I feel pain just by looking at it, definitely an instance of move fast break ~~things~~ bones