Hacker News Reader

IIRC, even if you enable remote connection, the passwordless login is still only authorized locally.

Yeah good point, you're right. The root user is defined as root@localhost, not root@%.

Has that always been the case?