I have a few servers that still seem to have the default ANY-user and information_schema.
I would delete it, but they are production servers. It seems very worrisome to me
- What is this Any user that accepts connections from any host?
- What is information_schema?
- I know MySQL is a database server that should be configured, but some security by default seems not a bad idea, e.g. a default PermitRootLoginwithoutPassword, although it might make changer the password harder.
I have set up my server to not accept connections on port 3306 from other machines and might soon place the MySQL server entirely in a virtual network (192.168.x.x).