On 1/31/07, Ralf Corsepius <rc040203@xxxxxxxxxx> wrote:
On Wed, 2007-01-31 at 11:10 -0700, Tom Tromey wrote: > >>>>> "Ralf" == Ralf Corsepius <rc040203@xxxxxxxxxx> writes: > > Ralf> I don't have any reasons to trust this URL smolt sends it data too. > > In principle I think this site should be controlled by the fedora project. Why do you think are people disabling log-in prompts, forging/suppressing server id-strings, not using HINFO records in named etc. ?
No idea what you're talking about, and I consider myself somewhat paranoid.
.. for not exposing details to the public to prevent them from exposing them from avoidable unnecessarily vulnerabilities.
Well I guess the public could look at the large textbox with the data that could be sent, or open up ethereal to watch the unencrypted data....or they could just not click 'yes'.
Not worth mentioning, jerks sneaking on connections, theft of the data base, connecting this data with data available from other sources and selling this data ...
We're still talking about data which contains solely of hardware information which is individually publicly available, but collectively somewhat unique to a computer right?
This consideration alone is sufficient reason for me to classify smolt as non-acceptable.
Okay. But your non-logical red-herring field arguments are getting somewhat annoying.
> I didn't look to see whether it is or not. But in any case IMO it > ought to be approximately as trustworthy as the standard yum servers. > > The smolt data looked quite nice to me. Good stuff to know. Pardon, but you'd better never mention the word "security" in a Fedora context again ;)
Now that's just uncalled for.
Ralf
Arthur -- Fedora Core 6 and proud -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list