<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 11-06-03 09:36 AM, Mario Limonciello wrote:
<blockquote
cite="mid:BANLkTimYx5ER9n5tKJ52KrF=h0wsE9XP6A@mail.gmail.com"
type="cite">
<pre wrap="">On Fri, Jun 3, 2011 at 10:16, Bilal Akhtar <a class="moz-txt-link-rfc2396E" href="mailto:bilalakhtar@ubuntu.com"><bilalakhtar@ubuntu.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi
I originally posted this message as [Bug 790009] on Launchpad.
It was suggested that this list is a better place for the suggestion.
------
Having "remote desktop" as an option in the default installation
creates a security risk.
It invites new users to enable it, not understanding the security
implications. They then end up with unwanted connections to their
machine. A quick look around the "security discussions" forum on
ubuntuforums shows that this happens quite frequently.
I propose that it should be removed from the LiveCD. If a remote connection
program is needed, then something that*requires* SSH tunnelling could be
provided.
--
Jane Atkinson
(Irihapeti)
--
ubuntu-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ubuntu-devel@lists.ubuntu.com">ubuntu-devel@lists.ubuntu.com</a>
Modify settings or unsubscribe at:
<a class="moz-txt-link-freetext" href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel">https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel</a>
</pre>
</blockquote>
<pre wrap="">Removing sounds like a fairly heavy footed approach. If the UI to enable it
isn't informative enough to explain the security implications, perhaps that
UI should just be improved instead.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
The UI allows the user to setup remote access without a password,
either a password should be generated automatically, or it shouldn't
be enabled without having to enter a password manually, and I really
feel that uPNP shouldn't be an option during setup.<br>
</body>
</html>