Re: "Workstation" Product defaults to wide-open firewall

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





Am 09.12.2014 um 14:16 schrieb Bastien Nocera:
On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote:
Why we can't have something like this?  And if you don't want a popup
asking, have something in the NetworkManager applet menu, where people
can easily find the switch without having to search for it?  A "[x]
allow sharing" checkbox?  A firewall zone selector?

We can — we just need someone to design and write it.

A design for something that we don't want to implement.

and that is the point - you do not want and care because you seem to think users are too stupid to make their own decisions - you know what Linus said to that in direction of GNOME?

This was one of the
options when implementing the feature, one that we didn't pursue. We chose
instead to use "user intent" as a way to do this.

If you start sharing something on a network, then we consider it safe to share.

the problem is that you don't know *who* or *what* opened the port

If you connect to a public unencrypted Wi-Fi, you won't have the option to. If
you connect to an encrypted Wi-Fi where sharing your holiday photos isn't acceptable
then it won't, because you didn't ask it to in the first place

besides suspend / move machine

a sane firewall design (sadly Windows has that in the meantime) is that if i open a port in my homenetwork, supsend the machine and wake it up in a foreign network ports are closed until i decide to open them there too, but Fedora goes the easy way "who cares how and why as long things appear to work"

*who* told you that people don't share things *unintentional* by a wrong click which is *not* a problem until you decide to open ports

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux