MongoDB and ElasticSearch Clusters WIPED! The Meow attack and how Backend Engineers can prevent it

The Backend Engineering Show with Hussein Nasser

Episode | Podcast

Date: Thu, 30 Jul 2020 15:08:25 GMT

<p>Bob Diachenko discovered an attack on MongoDB and ElasticSearch clustered that are unsecured. We discuss this attack in detail and how we as Backend Engineers can secure our databases. &nbsp;&nbsp;0:00 The Meow Attack again MongoDB &amp; ElasticSearch 1:43 How does it work? 5:00 Scope of the Attack 6:00 How Backup &amp; MVCC Help 8:30 What does “Unsecure” mean? 11:00 Protecting Database Instances</p>