Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Have you tried searching for "site:pastebin.com mysql_connect" ? That's even scarier. There's people that do post their database password and username publicly.


That is unlikely to matter - mysql and postsql doesn't allow connections from outside of localhost by default on Ubuntu (and properly other unixes as well).

So really, yeah if you already have local access you can pwn the box, but you have pretty much done that already.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: