Hacker News new | past | comments | ask | show | jobs | submit login

It would seem to me that New Relic license keys would also be available to the hacker(s), as they are required to link MongoHQ to New Relic.

In speaking with New Relic, these keys cannot be regenerated.

Wondering if anybody could advise as to what security issues that might create? I presume it could potentially give access to some infrastructure information. Have emailed their support but waiting on a reply.

I'd like to chime in that, this circumstance notwithstanding, MongoHQ has been great during the time we've been a customer of theirs.




From New Relic support:

With the license key someone could configure an application to report to the account affiliated with the key. They would not be able to access the account or use the key to retrieve any personal information from the account.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: