Company
Date Published
Author
Itamar Haber
Word count
733
Language
English
Hacker News points
None

Summary

There has been an increase in reports of NoSQL breaches, specifically in Redis databases, which were likely triggered by Salvatore Sanfilippo's blog post about Redis security. The seeds for the breaches were laid long ago and are still present unless addressed. If using Redis Enterprise Cluster or Cloud, users can rest assured that their servers have not been breached due to implemented security measures. However, unprotected databases remain vulnerable, and it is crucial to set a password and take steps to secure the database properly. Redis' default password is set to none, and users must pay attention to defaults to ensure security. Future versions of Redis will include safer defaults and improved security mechanisms, but operators are responsible for protecting their databases.