ZeroConf in Ubuntu Edgy

Dan Kegel dank at kegel.com
Mon Jul 3 08:09:49 BST 2006


On 7/2/06, Krishna Sankar <ksankar at gte.net> wrote:
> > Zeroconf is simply too scary to enable by default, but I can
> <KS>
> If so, how is apple mitigating the risk ?

They're not, as far as I know.   Their xcode IDE,
for instance, uses distcc in an extremely convenient but insecure
mode.  Ho hum, let's see, was this vulnerability exploited yet?
Yes: http://seclists.org/lists/bugtraq/2005/Mar/0197.html
Basically, they're complete idiots when it comes to security.

> If it is OK for Apple, why not for Ubuntu ?

Because Ubuntu isn't run by a bunch of idiots?
- Dan



More information about the ubuntu-devel mailing list