hidding buckets and keys

Antonio Rohman Fernandez rohman at mahalostudio.com
Fri May 27 00:55:08 EDT 2011



hello all,

http://IP:8098/riak?buckets=true [ will show all
available buckets on Riak
]
http://IP:8098/riak/bucketname?keys=true&props=false [ will show all
available keys on a bucket ]

to me, this proves a very big security
risk, as if somebody discovers your Riak server's IP, is very easy to
read all the information from it, even if you try to obfuscate the
buckets/keys... everything is highly readable.
there is any way to
disable those options? like {riak_kv_stat, false} hides the /stats
page

thanks

Rohman 

		 [1]

ANTONIO ROHMAN FERNANDEZ
CEO, Founder &
Lead Engineer
rohman at mahalostudio.com [2]		 
PROJECTS
MaruBatsu.es
[3]
PupCloud.com [4]
Wedding Album [5]

 

Links:
------
[1]
http://mahalostudio.com
[2] mailto:rohman at mahalostudio.com
[3]
http://marubatsu.es
[4] http://pupcloud.com
[5]
http://wedding.mahalostudio.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.basho.com/pipermail/riak-users_lists.basho.com/attachments/20110527/4f2fc581/attachment.html>


More information about the riak-users mailing list