"Workstation" Product defaults to wide-open firewall

Reindl Harald h.reindl at thelounge.net
Mon Dec 8 16:08:06 UTC 2014


Am 08.12.2014 um 16:55 schrieb Bastien Nocera:
>>> You're free to select another firewall zone.
>>
>> How, when you don't even install the firewall configuration tool by default?
>
> Settings -> Network, select your network -> Identity -> Firewall zone

that's possible with one click?

fine, then the only right decision would have been ship *that* as 
default and say "You're free to select another firewall zone" exactly 
that way BUT NOT ship danergous and unsecure defaults

there is no but and if

nobody of your user audience will lock down his machine manually when 
all seems to work and a user which is not able to manually switch to a 
more unsecure mode (by read 5 seconds docs or Google) better stays with 
shields up - better be safe than sorry

hopefully i die before the userbase growing up with that direction of 
wrong defaults is in the position to make decisions and technical 
implementations!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141208/2df235a7/attachment.sig>


More information about the devel mailing list