News Menu |
|
|
Site Menu |
|
|
Site Affiliates |
|
|
Advertisements |
|
|
|
|
|
|
| |
In the wake of the MySpooler worm that spread via weak MySQL passwords on Windows installations last week, database users criticized the open-source database for lax security lockdown on installation, saying that it should be held to the same high standards as traditional security whipping-boy Microsoft Corp.
"Even … Windows forces you to create an admin password when you install," one developer wrote in an e-mail. "Poor coding, security or thoughtlessness on the part of 'open-source' developers should not be pooh-poohed. Defending [Microsoft] by blaming the user was laughed at by the arrogant technorati who band together behind 'open source;' neither is it good enough for 'open source' to hide behind it now."
MySpooler was a bot attack launched against default Windows installations of MySQL that infected vulnerable systems at the rate of up to 100 per minute. It was halted after DNS (Domain Name System) service authorities shut off access to IRC servers controlling the worm.
One MySQL user, George Michel, a programmer/analyst for the Yale Center for Medical Informatics at Yale University in New Haven, Conn., said MySQL is getting ever more polished in subsequent versions.
News source: eWeek
|
| There are 0 additional comments, Post a comment | View printable post | Open/Close All Comments |
|
|
|
|