This should have been run as a non privileged user, on private IPs, a local socket or localhost along with a long and strong password, so only authenticated connections would be able to be able to use it.<p>Since none of these memory store solutions (memcached, redis, etc.) should be able to be connected to on public addresses it would be a nice feature to only allow them to listen on private internal IP space or sockets by default and fail to run if anything else is used.<p>This would help reduce everyone&#x27;s attack surface by default and help prevent misconfiguration by the user or 3rd party integration software.