|
Description:
|
|
Every server ought to have a password. Every one. It's 2019, and apparently that advice hasn't sunken in. I still can't believe there are people without passwords/codes on their mobile devices or home PCs, but there are. It's crazy, and while I can forgive some individuals for doing this, no IT infrastructure staff or developer ought to do this. And yet, a double fail recently from Evisort. This is a startup doing some AI work, but apparently they set up an Elasticsearch server without a password. I've written about this before, and you set a password, but don't have to. That's both an Elasticsearch failure for not requiring one, but also a monumental failure on the part of whoever set this up inside a company. Read the rest of A Double Failure |