4 ms·
No, it's the equivalent of selling a car that doesn't require the key to be present to start by default. If the software is insecure out of the box, that's cra
by hueving 10y ago
No, it's the equivalent of selling a car that doesn't require the key to be present to start by default.
If the software is insecure out of the box, that's crap vendor behavior.
- saurik 10y agoI think it is more like the equivalent of a refrigerator without a lock. You aren't supposed to keep a refrigerator outside your locked home. You can and do see people fit refrigerators with locks for that purpose, but when you do that there are tons of other things you will need to do, and I don't think it is optimal for the refrigerator people to try to solve them. (That said, as the issue here is "localhost or 0.0.0.0", I don't think keys or locks are good analogies: more like, when they come and install your refrigerator, they should probably install it inside, as that's the place it should be used, but surprisingly if you don't tell them this ahead of time they install it outside, so you can get access to it more quickly from your car, which is insane.)
- vacri 10y agoThere is plenty of heavy industrial machinery that doesn't have keys - the canonical example is a jumbo jet.