this post was submitted on 29 Dec 2025
342 points (99.7% liked)

Programmer Humor

28922 readers
1667 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 

There are over 213k+ potentially vulnerable internet-exposed MongoDB instances, ensuring that this exploit is web scale.

MongoDB is webscale

all 37 comments
sorted by: hot top controversial new old
[–] optissima@lemmy.ml 114 points 1 month ago (4 children)

Not understanding why I'd need mongodb over a traditional database paying dividends today

[–] fahfahfahfah@lemmy.billiam.net 53 points 1 month ago (1 children)

The fact that a lot of relational databases now offer document storage does lend credence to the idea, but at the same time you lose so much when you only have document storage

[–] ThunderComplex@lemmy.today 11 points 1 month ago (1 children)

But if you’ve planned your app through and know beforehand you don’t need relational data, you can skip the overhead of a RDBMS.
At least that’s what I would say if I hadn’t been in this exact situation and it later turned out we do need relational data so we had relational documents.
Also working with MongoDB without ODM is pure pain.

[–] Croquette@sh.itjust.works 4 points 1 month ago (1 children)

Side tracking here : to me, it seems like every DB is relational, no?

What use case would a DB used and not be relational? With my minimal experience in DB, I haven't seen any other use cases than a relational DB.

[–] count_dongulus@lemmy.world 6 points 1 month ago (1 children)

Cache-like storage, private user-specific data, blobby or otherwise schemaless data. Stuff like that. But IMO it's a matter of time until you find a need to operate against this data relationally, and then you regret using document storage. I've made this mistake twice now and do not intend to make it again. I now consider document storage architecture to be a performance optimization with significant tradeoffs, and not a choice to be made by default for nearly any scenario.

[–] Croquette@sh.itjust.works 3 points 1 month ago

My reason asking is because there are other scheme I feel are more adequate for non relational data, but this isn't my domain and I barely dabbled in that, so that's worth absolutely nothing.

But your point about the data being used later makes a lot of sense and I didn't think about that. Down the road, someone will ask you to create links to your data and if you already have a DB, then you don't have to change the whole infrastructure to accommodate that. You can create new schemes and already have a somewhat functional access to it.

Thanks for the input.

[–] qaz@lemmy.world 31 points 1 month ago (1 children)

I've used it before but couldn't see the advantage over using JSONB with Postgres except change streams.

[–] epyon22@sh.itjust.works 12 points 1 month ago

Glad I'm backed up in that jsonb solves the same problem

[–] Dadifer@lemmy.world 17 points 1 month ago

Exactly what I was thinking 😂

[–] Scipitie@lemmy.dbzer0.com 12 points 1 month ago* (last edited 1 month ago) (1 children)

"gimme your mongodb url for me to do anything"

  • random docker container or tool.

Last example where I was ... Annoyed by: unifi. Their management application demands a mongodb.

[–] 4am@lemmy.zip 12 points 1 month ago (1 children)

This has actually prevented me from upgrading it because my homelab hardware was one generation too old for AVX instructions, which are required now. And now hardware is going to be priced out of range for average people.

Anyway I just said fuck it and I’m using the ISP router. I’ve too much other bullshit to deal with. Fuck MongoDB

[–] qaz@lemmy.world 11 points 1 month ago (2 children)

Maybe FerretDB will work.

FerretDB allows you to use MongoDB drivers seamlessly with PostgreSQL as the database backend. Use all tools, drivers, UIs, and the same query language and stay open-source.

[–] richieadler@programming.dev 6 points 1 month ago

They even have a SQLite backend now.

[–] 4am@lemmy.zip 2 points 4 weeks ago

Oh sweet, thanks I will make a note to try this!

[–] Deceptichum@quokk.au 84 points 1 month ago (1 children)

MongoDB the company who drives its employees to suicide?

[–] qaz@lemmy.world 25 points 1 month ago (2 children)

What are you referring to?

[–] Deceptichum@quokk.au 112 points 1 month ago* (last edited 1 month ago) (2 children)

Woman took her own life after $35B tech company cancelled health benefits during mental health leave, parents claim

The headline misses that they fired her after they demanded she return to the office and she begged for a bit more unpaid mental health leave.

[–] qaz@lemmy.world 54 points 1 month ago

That's fucked up

[–] flambonkscious@sh.itjust.works 4 points 1 month ago

Thanks for the not-linked url. MSN is gross, too but a lot less so

[–] kubica@fedia.io 76 points 1 month ago

Try to stay positive, think of all the software still using MongoDB that never got updated after 2016.

[–] BlameTheAntifa@lemmy.world 59 points 1 month ago (3 children)
[–] MashedTech@lemmy.world 15 points 1 month ago

HOLY FUCKING SHIT

[–] flowers_galore2@lemmynsfw.com 8 points 1 month ago

Jesus fuckin christ that’s awful

[–] Agent641@lemmy.world 45 points 1 month ago (1 children)

One day I'll learn what webscale means, but it is not this day.

[–] kibiz0r@midwest.social 38 points 1 month ago (2 children)

Turns out we were better off piping data to /dev/null

[–] qaz@lemmy.world 17 points 1 month ago

For GDPR compliance, absolutely

[–] probable_possum@leminal.space 8 points 1 month ago

/dev/null ACE incoming soon. ;)

[–] Thorry@feddit.org 29 points 1 month ago (3 children)

MongoDB is normally not public facing right?

[–] qaz@lemmy.world 37 points 1 month ago

It shouldn't be

[–] enumerator4829@sh.itjust.works 25 points 1 month ago

How else would you be webscale?

[–] anton@lemmy.blahaj.zone 7 points 1 month ago

The default configuration in 2017 was public write access, but those databases where taken over long ago.

[–] goatinspace@feddit.org 15 points 1 month ago (1 children)
[–] sukhmel@programming.dev 8 points 1 month ago

I feel pain just by looking at it, definitely an instance of move fast break ~~things~~ bones