Several reports we’re published in the news about how easy it is to access data stored in some NoSQL systems, including MongoDB. This is not surprising because security was rather relaxed in earlier versions of MongoDB . This post lists some of the common vulnerabilities in MongoDB and Percona TokuMX.

Network Security

One key point is to ensure that the bind_ip setting is correctly adjusted: in MongoDB 2.4 and Percona TokuMX, it is not set which means that the server will listen to all available network interfaces. If proper firewall rules (iptables, Security Groups in AWS, …) are not in place, your dataset could easily be queried from anywhere in the world!

In MongoDB 2.6+, bind_ip is set by default to 127.0.0.1 in the official .deb and .rpm packages. This is great from a security point of view, but remember that you’ll still have to adjust the setting if the application servers are not …

Thanks to all who attended my webinar last week on Writing Application Code for MySQL High Availability.  This blog is for me to address the extra questions I didn’t have time to answer on the stream.

What do you think about using Galera Cluster but writing to a single Node with LVS ?

Whatever HA strategy you like that can present  a layer 3 or layer 4 to your application tier is fine.  A lot of people using PXC us it in a single-writer (master/slave) kind of way.

Is there any way we can determine slave lag and then decide to use weather master or slave? for e.g. instead of using query to find if data is available in slave then …. use if lag_time < xyz?

One of my main points was that this is usually more expensive to implement inside your application code than it …

By my count MySQL 5.7 added over 150 new features, and some of my favourite ones are based on community ideas and contributions:

1. Statement Timeout (contributed by Davi Arnaut)
2. Disabled Storage Engines (suggested by the community)
3. MySQL Command Line client Ctrl+C support fixed (bug reported by the community)
4. Barracuda + Dynamic row format enabled by default (change made to better support WordPress and …

In our previous post, we showed you how to interpret reports generated by pt-query-digest. Today we’d like to cover some of its more advanced features, as it is a pretty extensive tool with lots of functionality. We’ll also show you what information you should be looking for, and how to derive conclusions based on that data. 

This is the eleventh installment in the ‘Become a MySQL DBA’ blog series. Our previous posts in the DBA series include Analyzing SQL Workload with pt-query-digest, Query Tuning Process, …

The Sakila sample database was created almost 10 years ago, as a sample set of data for MySQL courses and examples.

The database was developed by MySQL employees, with substantial contributions form the community.

Recently, the database was updated to use some of the features in MySQL 5.7. As a result, we had two sets of samples, one to use with MySQL 5.0+, and one that only loads with MySQL 5.7.

I filed a feature request, offering a patch to use conditional schema and data changes, which was incorporated very quickly into the official release.

The current release, available within the …

Today, at the Strata Conference in Santa Clara, Calpont Corporation announced that it is changing its name to InfiniDB, Inc., and that it has raised another $7.5M in funding. So “What’s in a name?” you ask?  For InfiniDB, a lot, actually. Since its introduction in 2010, the InfiniDB database has delivered exceptional scaling and speed, […]

All ad earnings on heidisql.com from September 01 up to the rest of the year, namely December 31 2015, will be donated to the refugees help operation Aktion Deutschland hilft!

This way I want to support the huge help operation for the refugees of the Syrian Civil War.

This Log Buffer Edition carries on with the weekly culling of blog posts from Oracle, SQL Server and MySQL.

Oracle:

Most people are now aware that in 12c, a VARCHAR2 has been extended from a maximum size of 4000 to 32767 bytes.

FDMEE is offered as the full-featured successor to Oracle Hyperion Financial Data Quality Management ERP Integration Adapter for Oracle Applications (ERP Integrator) and Oracle Hyperion Financial Data Quality Management (FDM).

Cybersecurity is Hot! In fact, so is the weather here in California at this moment.

How do you monitor …

MySQL sys version 1.5.0 has just been released.

It has significant contributions from both external contributors (thank you Daniël and Shlomi) and internal (thank you Jesper and Morgan). Jesper particularly made many significant improvements in this release.

Here’s a full summary of the changes:

Improvements

• The `format_bytes` function now shows no decimal places when outputting a simple bytes value
• The `processlist`/`x$processlist` views where improved, changes include:
  • The `pid` and `program_name` of the connection are shown, if set within the `performance_schema.session_connect_attrs` table (Contributed by Daniël van Eeden)
  • Issue #50 – The current statement progress is reported via …

Sometimes it's useful to have a set of data prepared to be used on a fresh MySQL install for testing purposes. Or you might be preparing some training or workshop and want to prepare examples with fake information. For MySQL there are some choices available:

Employees Sample Database: provides a combination of a large base of data (approximately 160MB) spread over six separate tables and