320
MongoBleed is web scale (lemmy.world)
submitted 10 months ago by to c/programmer_humor@programming.dev
30 comments fedilink hide all child comments
 

There are over 213k+ potentially vulnerable internet-exposed MongoDB instances, ensuring that this exploit is web scale.

MongoDB is webscale

you are viewing a single comment's thread
view the rest of the comments
[–] 108 points 10 months ago (14 children)

Not understanding why I'd need mongodb over a traditional database paying dividends today

  • permalink
  • fedilink
  • source
  • hideshow 14 child comments
    •
  • [–] 50 points 10 months ago (4 children)

    The fact that a lot of relational databases now offer document storage does lend credence to the idea, but at the same time you lose so much when you only have document storage

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 11 points 10 months ago (3 children)

    But if you’ve planned your app through and know beforehand you don’t need relational data, you can skip the overhead of a RDBMS.
    At least that’s what I would say if I hadn’t been in this exact situation and it later turned out we do need relational data so we had relational documents.
    Also working with MongoDB without ODM is pure pain.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 10 months ago (2 children)

    Side tracking here : to me, it seems like every DB is relational, no?

    What use case would a DB used and not be relational? With my minimal experience in DB, I haven't seen any other use cases than a relational DB.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 10 months ago (1 child)

    Cache-like storage, private user-specific data, blobby or otherwise schemaless data. Stuff like that. But IMO it's a matter of time until you find a need to operate against this data relationally, and then you regret using document storage. I've made this mistake twice now and do not intend to make it again. I now consider document storage architecture to be a performance optimization with significant tradeoffs, and not a choice to be made by default for nearly any scenario.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 10 months ago

    My reason asking is because there are other scheme I feel are more adequate for non relational data, but this isn't my domain and I barely dabbled in that, so that's worth absolutely nothing.

    But your point about the data being used later makes a lot of sense and I didn't think about that. Down the road, someone will ask you to create links to your data and if you already have a DB, then you don't have to change the whole infrastructure to accommodate that. You can create new schemes and already have a somewhat functional access to it.

    Thanks for the input.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 12 points 10 months ago* (last edited 10 months ago) (4 children)

    "gimme your mongodb url for me to do anything"

    • random docker container or tool.

    Last example where I was ... Annoyed by: unifi. Their management application demands a mongodb.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 11 points 10 months ago (3 children)

    This has actually prevented me from upgrading it because my homelab hardware was one generation too old for AVX instructions, which are required now. And now hardware is going to be priced out of range for average people.

    Anyway I just said fuck it and I’m using the ISP router. I’ve too much other bullshit to deal with. Fuck MongoDB

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] [S] 10 points 10 months ago (2 children)

    Maybe FerretDB will work.

    FerretDB allows you to use MongoDB drivers seamlessly with PostgreSQL as the database backend. Use all tools, drivers, UIs, and the same query language and stay open-source.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago*

    well see when you’re too lazy to design a schema and just want to throw broken data into a black hole where you may or may not be able to retrieve it and deal with the repercussions in production - or better yet let the ops team handle it at 3am - then that’s when you’d choose mongodb

  • permalink
  • fedilink
  • source
  • parent