MongoDB 没设置密码，还真会被比特币勒索

某项目，测试环境偷懒没设置密码，为了方便本地调试也开了外网访问端口。。

结果，今天一上班，杯具了。。2333

数据库全部清空了，只剩一个 Warning 的数据库：

里面有个 Readme 的 Collection，只有这样一条记录

{ "_id": "5a199385e2d806f3814a7dbf", "BitCoin": "1EPA6qXtthvmp5kU82q8zTNkFfvUknsShS", "eMail": "[email protected]", "Exchange": "https://localbitcoins.com", "Solution": "Your DataBase is downloaded and backed up on our secured servers. To recover your lost data: Send 0.2 BTC to our BitCoin Address and Contact us by eMail with your MongoDB server IP Address and a Proof of Payment. Any eMail without your MongoDB server IP Address and a Proof of Payment together will be ignored. You are welcome!" } 

幸好数据能从生产拉回来。。。真不敢偷懒了。