c/programmer_humor · by qaz@lemmy.world · 233d

MongoBleed is web scale

There are over 213k+ potentially vulnerable internet-exposed MongoDB instances, ensuring that this exploit is web scale.

MongoDB is webscale

342 points · 34 comments · view on lemmy.world

34 Comments

optissima@lemmy.ml · 113 pts · 233d (14 replies)

Not understanding why I'd need mongodb over a traditional database paying dividends today

fahfahfahfah@lemmy.billiam.net · 53 pts · 233d (4 replies)

The fact that a lot of relational databases now offer document storage does lend credence to the idea, but at the same time you lose so much when you only have document storage

ThunderComplex@lemmy.today · 11 pts · 232d (3 replies)

But if you’ve planned your app through and know beforehand you don’t need relational data, you can skip the overhead of a RDBMS.
At least that’s what I would say if I hadn’t been in this exact situation and it later turned out we do need relational data so we had relational documents.
Also working with MongoDB without ODM is pure pain.

Croquette@sh.itjust.works · 4 pts · 232d (2 replies)

Side tracking here : to me, it seems like every DB is relational, no?

What use case would a DB used and not be relational? With my minimal experience in DB, I haven't seen any other use cases than a relational DB.

count_dongulus@lemmy.world · 6 pts · 232d (1 reply)

Cache-like storage, private user-specific data, blobby or otherwise schemaless data. Stuff like that. But IMO it's a matter of time until you find a need to operate against this data relationally, and then you regret using document storage. I've made this mistake twice now and do not intend to make it again. I now consider document storage architecture to be a performance optimization with significant tradeoffs, and not a choice to be made by default for nearly any scenario.

Croquette@sh.itjust.works · 3 pts · 232d

My reason asking is because there are other scheme I feel are more adequate for non relational data, but this isn't my domain and I barely dabbled in that, so that's worth absolutely nothing.

But your point about the data being used later makes a lot of sense and I didn't think about that. Down the road, someone will ask you to create links to your data and if you already have a DB, then you don't have to change the whole infrastructure to accommodate that. You can create new schemes and already have a somewhat functional access to it.

Thanks for the input.

qaz@lemmy.world · 31 pts · 233d (1 reply)

I've used it before but couldn't see the advantage over using JSONB with Postgres except change streams.

epyon22@sh.itjust.works · 13 pts · 233d

Glad I'm backed up in that jsonb solves the same problem

Dadifer@lemmy.world · 17 pts · 233d

Exactly what I was thinking 😂

Scipitie@lemmy.dbzer0.com · 12 pts · 233d (4 replies)

"gimme your mongodb url for me to do anything"

random docker container or tool.

Last example where I was ... Annoyed by: unifi. Their management application demands a mongodb.

4am@lemmy.zip · 12 pts · 232d (3 replies)

This has actually prevented me from upgrading it because my homelab hardware was one generation too old for AVX instructions, which are required now. And now hardware is going to be priced out of range for average people.

Anyway I just said fuck it and I’m using the ISP router. I’ve too much other bullshit to deal with. Fuck MongoDB

qaz@lemmy.world · 11 pts · 232d (2 replies)

Maybe FerretDB will work.

FerretDB allows you to use MongoDB drivers seamlessly with PostgreSQL as the database backend. Use all tools, drivers, UIs, and the same query language and stay open-source.

richieadler@programming.dev · 6 pts · 232d

They even have a SQLite backend now.

4am@lemmy.zip · 2 pts · 230d

Oh sweet, thanks I will make a note to try this!

pupbiru@aussie.zone · 1 pts · 192d

well see when you’re too lazy to design a schema and just want to throw broken data into a black hole where you may or may not be able to retrieve it and deal with the repercussions in production - or better yet let the ops team handle it at 3am - then that’s when you’d choose mongodb

Deceptichum@quokk.au · 82 pts · 233d (5 replies)

[ removed ]

qaz@lemmy.world · 25 pts · 233d (4 replies)

What are you referring to?

Deceptichum@quokk.au · 112 pts · 233d (2 replies)

[ removed ]

qaz@lemmy.world · 53 pts · 233d

That's fucked up

flambonkscious@sh.itjust.works · 4 pts · 232d

Thanks for the not-linked url. MSN is gross, too but a lot less so

mp3@lemmy.ca · 31 pts · 233d

Found this while searching