Path: csiph.com!usenet.pasdenom.info!gegeweb.org!newsfeed0.kamp.net!newsfeed.kamp.net!feeder1.cambriumusenet.nl!feed.tweaknews.nl!194.109.133.83.MISMATCH!newsfeed.xs4all.nl!newsfeed4a.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.096 X-Spam-Evidence: '*H*': 0.81; '*S*': 0.00; 'postgresql': 0.07; 'level:': 0.09; 'cc:addr:python-list': 0.11; 'jan': 0.12; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'security?': 0.16; 'unnecessary.': 0.16; 'wifi': 0.16; 'prevent': 0.16; 'wrote:': 0.18; 'network,': 0.22; 'cc:addr:python.org': 0.22; 'instance,': 0.24; 'mon,': 0.24; 'cc:2**0': 0.24; 'push': 0.26; 'header:In-Reply-To:1': 0.27; 'michael': 0.29; 'chris': 0.29; 'am,': 0.29; "doesn't": 0.30; 'message-id:@mail.gmail.com': 0.30; 'firewall': 0.31; 'yes.': 0.31; 'quite': 0.32; 'cases': 0.33; 'could': 0.34; 'no,': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'next': 0.36; 'machines': 0.38; "couldn't": 0.39; 'extremely': 0.39; 'sure': 0.39; 'how': 0.40; 'lower': 0.61; 'unauthorized': 0.61; "you're": 0.61; 'save': 0.62; 'our': 0.64; 'more': 0.64; 'internet': 0.71; 'subject:Hello': 0.72; 'yourself': 0.78; '2015': 0.84; 'difficult,': 0.91; 'subject:World': 0.91; 'trouble.': 0.91; 'to:none': 0.92 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type:content-transfer-encoding; bh=rrTdhnmigf7L5oR5EdALOxvsrQN7279MEOTKSNze2Zs=; b=NQFkjTURi+PWijERchNGt/GV7gDCpwkCD6yGxUOx03JA0HHd3leT9q4NZUgbWQ2Uht QKh8mDSxcDh3n7lHTxBfx2DOFOCDOszwtN0p1IRy0PGTdbEDip2oEW5LNDim7dEiHu/j g316EYFBZN0vUgoOd9aMk4GIHUgiHgzd9GpncnXaXtp25XRs75fUHonDawfQwHqSzGgC H0Xquc+zpGrCOJcpHdt39lVZSkWwLk6VO57F/6x3hEoDQqhzEtqJVPaCGl25DbO79t4g OZG4rJce3Xxk6bFCC8thtnKyY4HBUoWa+OYdCqU0hzinbTjJPCgk6Hk4lBgNgjWw0IAn Us6w== MIME-Version: 1.0 X-Received: by 10.107.134.102 with SMTP id i99mr16020697iod.53.1421589427492; Sun, 18 Jan 2015 05:57:07 -0800 (PST) In-Reply-To: References: <54957226$0$12975$c3e8da3$5496439d@news.astraweb.com> <54ae7b75$0$15900$e4fe514c@dreader35.news.xs4all.nl> <54ba76e0$0$15897$e4fe514c@dreader35.news.xs4all.nl> <54baf443$0$13002$c3e8da3$5496439d@news.astraweb.com> <54BB16E4.90704@gmail.com> Date: Mon, 19 Jan 2015 00:57:07 +1100 Subject: Re: Hello World From: Chris Angelico Cc: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 19 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1421589430 news.xs4all.nl 2935 [2001:888:2000:d::a6]:45619 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:83982 On Mon, Jan 19, 2015 at 12:35 AM, Michael Str=C3=B6der wrote: > Chris Angelico wrote: >> Want security? >> Push the encryption and authentication down to a lower layer, and save >> yourself the trouble. > > Yes. And now for the next level: How to prevent unauthorized machines to > connect to your network=E2=80=A6 Extremely difficult, and in many cases quite unnecessary. No, you let them on the network, and then make sure that won't hurt you more than you're prepared to accept. For instance, someone could join my wifi network - all they need is the WPA2 PSK, which is well known around the place - and use/abuse our internet connection; but they couldn't access my PostgreSQL databases, because the firewall doesn't permit access to port 5432. ChrisA