skip-networking

[Hostultrix]

hi,

Sorry to post another question, :)

I'm curious about the potential risks of allowing remote connections to mysql, i.e., removing the skip-networking line? Some seem to think it is ok, others think it is not. I personally don't see much of an issue, but maybe I'm missing something.

A few clients seem to like to be able to connect remotely, also.

Any comments appreciated


Brandon

[charles]

If you make a configuration mistake and dont set a root password say, or give an account extended privileges and they dont set a pasword or use one really easy to crack, you will have exposed all your databases (and worse someone might be malicious and delete stuff if they have the rights).

You are always going to be exposed to brute force attacks trying passwords as well.

Generally speaking I think this is a bad idea to do.

charles

[Hostultrix]

hmm perhaps...we did set the root password and all but i guess there is always a risk