On 2014-12-09 13:26, Reindl Harald wrote:
Am 09.12.2014 um 20:19 schrieb finid(a)vivaldi.net:
> On 2014-12-09 13:01, Jan Rusnacko wrote:
>> On 12/09/2014 04:41 PM, Eric H. Christensen wrote:
>>> On Tue, Dec 09, 2014 at 03:02:45PM +0100, Jan Rusnacko wrote:
>>>> Hey guys,
>>>> given that there is quite heated discussion about open by default
>>>> firewall, is this something we want to contribute to (as a team) ?
>>>> Do you think we a) can and b) should come with a statement and join
>>>> the discussion ?
>>> Moving this to the general security list...
>>> Did FESCo really approve this? I can't imagine someone actually
>>> approving such a dumb request.
>> No idea. Despite that, it shipped apparently, so can we actually do
>> something about it, or is this a lost cause for F21 ?
> Seriously! If that's the default on F21, I guess the only thing that
> be done now is to raise hell and push for the next system update to
> fix it
i can not eat enough to puke the appropriate amount for such horrible
decisions and as far as i can see the only hard defender comes again
and again with "rygel" as usecase to defened that decisison
are we now at a point where a random software dicatets security
did nobody leanr anything of the past at least 5 years?
i want my Windows back, at least it asked before it opens a port
*yes* i can fix that, i don't need firewalld as well as the
workstation spin *but* i am affected by *nay* hacked and compromised
machine on this damned planet starting to shoot on *my* infrastcuture
and burry me in useless noise masking the real treats
This is a well-known weakness of democracy.
One would only expect that anybody making a security recommendation
knows what they are talking about. Even more importantly, the person in
a position to accept such recommendations should also know the
consequences of what they are about to unleash on the rest of us.
Who should we be yelling at to get this fixed?