The MongoDB hack and the importance of secure defaults
I have never used MongoDB so I admit I'm talking blind here, but can someone explain how/why a piece of highly popular software gets to version 2.6 allowing unsecured remote connections by default?  Further to that is that type of thinking you want in the development process of something as critical as a database engine?  It just seems amazing to me that it got so far before the community in general pushed back that this was really bad design?  Hopefully someone with MongoDB history can explain if this was a long term sticking point, etc.  Thanks.