4 ms·

It baffles me how many people on HN cannot operate with a simple deny-all firewall. The windows version and updates I install are the only updates installed. Th

It baffles me how many people on HN cannot operate with a simple deny-all firewall. The windows version and updates I install are the only updates installed. The files I back up are the only files that back up. Nothing can connect to the internet. Not Windows Update, Not google chrome update, Not onedrive, Nor any virus or malware program. Reliance on the internet is the problem. No windows version including windows 11 REQUIRES the internet to operate. Install your OS from disk. Activate by phone(or don't bother...). Install seasoned updates from catalog. If the program wont specify the ports and servers it uses, DON'T USE IT AND DONT WRITE CODE FOR IT.

kstrauser 1y ago
Eh, lots of us use Little Snitch or the equivalent. But I confess that seems like victim blaming to me. Users shouldn’t be expected to watch their freaking OS vendor like a hawk. That’s the one vendor you kind of have to trust: if they’re lying to you about what they’re doing, all bets are off. This to me sounds like “I check my tire pressure every 8 miles because I don’t want them to explode catastrophically like they do for other people. Everyone should be doing this!” No. No, everyone should not have to do this.
- nomilk 1y ago
  > seems like victim blaming to me I admit to being in the category OP speaks of; i.e. would love control over what programs can access over the internet, but haven't the slightest clue how to set it up and manage it day to day.
deleted 1y ago
[deleted]
nomilk 1y ago
> It baffles me how many people on HN cannot operate with a simple deny-all firewall What is the barrier IYO, is it that awareness (or technical knowledge) just isn't there, or that installing isn't the issue but doing day to day work with a restrictive firewall becomes an inconvenience?
eptcyka 1y ago
I do not believe it is reasonable to use an OS where you need to do hostage negotiation on a daily basis. If you need to go this far, what will you do when an MS update adds a bypass for the firewall you’re using?
- Telaneo 1y ago
  > I do not believe it is reasonable to use an OS where you need to do hostage negotiation on a daily basis. So much this. It's not that technically minded people can't figure out how to florb the nerfwedge. It's that it shouldn't be needed to begin with, and you have to know about it to begin with (which usually happens by getting burned by not doing it, either with one's own machine, or a friend's or family member's machine).
- chasing0entropy 1y ago
  Again, I don't install updates I haven't pulled from the catalog after they seasoned and tested them myself, again offline. If they don't work offline, I don't install them.
  - eptcyka 1y ago
    And you think every user should follow this methodology?
olyjohn 1y ago
Maybe just don't use Windows and dont write code for it... and especially don't give them $200 for the Pro version, because that is nothing but a signal that you're willing to keep letting him fuck you while you write them a check.

kstrauser 1y ago

Eh, lots of us use Little Snitch or the equivalent. But I confess that seems like victim blaming to me. Users shouldn’t be expected to watch their freaking OS vendor like a hawk. That’s the one vendor you kind of have to trust: if they’re lying to you about what they’re doing, all bets are off. This to me sounds like “I check my tire pressure every 8 miles because I don’t want them to explode catastrophically like they do for other people. Everyone should be doing this!” No. No, everyone should not have to do this.

nomilk 1y ago
> seems like victim blaming to me I admit to being in the category OP speaks of; i.e. would love control over what programs can access over the internet, but haven't the slightest clue how to set it up and manage it day to day.

deleted 1y ago

[deleted]

nomilk 1y ago

> It baffles me how many people on HN cannot operate with a simple deny-all firewall What is the barrier IYO, is it that awareness (or technical knowledge) just isn't there, or that installing isn't the issue but doing day to day work with a restrictive firewall becomes an inconvenience?

eptcyka 1y ago

I do not believe it is reasonable to use an OS where you need to do hostage negotiation on a daily basis. If you need to go this far, what will you do when an MS update adds a bypass for the firewall you’re using?

Telaneo 1y ago
> I do not believe it is reasonable to use an OS where you need to do hostage negotiation on a daily basis. So much this. It's not that technically minded people can't figure out how to florb the nerfwedge. It's that it shouldn't be needed to begin with, and you have to know about it to begin with (which usually happens by getting burned by not doing it, either with one's own machine, or a friend's or family member's machine).
chasing0entropy 1y ago
Again, I don't install updates I haven't pulled from the catalog after they seasoned and tested them myself, again offline. If they don't work offline, I don't install them.
- eptcyka 1y ago
  And you think every user should follow this methodology?

olyjohn 1y ago

Maybe just don't use Windows and dont write code for it... and especially don't give them $200 for the Pro version, because that is nothing but a signal that you're willing to keep letting him fuck you while you write them a check.