4 ms·

So about the only thing you can give an example of is an application that no-one should be running on a server exposed to the Internet, that's dangerously broke

So about the only thing you can give an example of is an application that no-one should be running on a server exposed to the Internet, that's dangerously broken by default?

justsomehnguy 4y ago
So about the only thing you can object to is what I didn't provide you a comprehensive list of a networked software with an unsafe defaults, now or ever existed? Edit: with a 'deemed safe enough by Gordonjcp@HN' column of course.
- Gordonjcp 4y ago
  It's also unsafe to drive around with your eyes shut, but any reasonably competent person would know not to do that. Your argument is "software might have unsafe defaults, so you should rely on a piece of software that might have unsafe defaults".
  - justsomehnguy 4y ago
    > Your argument My argument is having an additional layer of protection just in case. Do you wear a helmet only on the days you fall off from your bicycle? > you should rely on a piece of software that might have unsafe defaults Well, if you just took the helmet with you but never bothered to wear it...
    - Gordonjcp 4y ago
      Your analogy breaks down. It would be more accurate to say "Do you wear a helmet only on the days you plan to intentionally launch yourself off the bike into a rock?" If you cannot install a server without ensuring you're running what you expect to be running, you've no business running it at all.
      - justsomehnguy 4y ago
        Tell that to all folks who have no idea but eager to have a private server/make business/whatever. It looks like you are one of those fanboys who regard their skill as a something sacrosanct to which no plebs should be allowed to even know.
        Gordonjcp 4y ago
        Not in the slightest. It's a skill that everyone should know, if they want to run servers. It's a skill you can acquire by reading some very simple instructions. Imagine if bridges were designed and built by the fuckwits that created (or indeed use) MongoDB.
        iforgotpassword 4y ago
        I don't wear a helmet so I can ride my bike drunk with eyes closed. The other way in which the analogy is flawed is that I might very well consider myself a perfect cyclist, but that still doesn't protect me from that drunk driver in a SUV shooting out a side alley where I have no chance to react.
        Gordonjcp 4y ago
        Your analogy still doesn't work. A firewall does nothing useful if there's nothing to firewall.
        iforgotpassword 4y ago
        Yes? That's exactly what I'm saying.

So about the only thing you can give an example of is an application that no-one should be running on a server exposed to the Internet, that's dangerously broken by default?

justsomehnguy 4y ago

So about the only thing you can object to is what I didn't provide you a comprehensive list of a networked software with an unsafe defaults, now or ever existed? Edit: with a 'deemed safe enough by Gordonjcp@HN' column of course.

Gordonjcp 4y ago
It's also unsafe to drive around with your eyes shut, but any reasonably competent person would know not to do that. Your argument is "software might have unsafe defaults, so you should rely on a piece of software that might have unsafe defaults".
- justsomehnguy 4y ago
  > Your argument My argument is having an additional layer of protection just in case. Do you wear a helmet only on the days you fall off from your bicycle? > you should rely on a piece of software that might have unsafe defaults Well, if you just took the helmet with you but never bothered to wear it...
  - Gordonjcp 4y ago
    Your analogy breaks down. It would be more accurate to say "Do you wear a helmet only on the days you plan to intentionally launch yourself off the bike into a rock?" If you cannot install a server without ensuring you're running what you expect to be running, you've no business running it at all.
    - justsomehnguy 4y ago
      Tell that to all folks who have no idea but eager to have a private server/make business/whatever. It looks like you are one of those fanboys who regard their skill as a something sacrosanct to which no plebs should be allowed to even know.
      - Gordonjcp 4y ago
        Not in the slightest. It's a skill that everyone should know, if they want to run servers. It's a skill you can acquire by reading some very simple instructions. Imagine if bridges were designed and built by the fuckwits that created (or indeed use) MongoDB.
      - iforgotpassword 4y ago
        I don't wear a helmet so I can ride my bike drunk with eyes closed. The other way in which the analogy is flawed is that I might very well consider myself a perfect cyclist, but that still doesn't protect me from that drunk driver in a SUV shooting out a side alley where I have no chance to react.
        Gordonjcp 4y ago
        Your analogy still doesn't work. A firewall does nothing useful if there's nothing to firewall.
        iforgotpassword 4y ago
        Yes? That's exactly what I'm saying.