Re: Assorted arm-buster problems - network configuration

From	Brian <ad44@cityscape.co.uk>
Newsgroups	linux.debian.user
Subject	Re: Assorted arm-buster problems - network configuration
Date	2019-07-08 21:20 +0200
Message-ID	<yhHl7-22v-5@gated-at.bofh.it> (permalink)
References	(5 earlier) <ygDjz-4wF-1@gated-at.bofh.it> <ygO5j-2Dm-1@gated-at.bofh.it> <ygYHn-g0-1@gated-at.bofh.it> <yh99L-6xq-3@gated-at.bofh.it> <yhFMl-ZV-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Mon 08 Jul 2019 at 13:37:26 -0400, Lee wrote:

> On 7/7/19, andreimpopescu@gmail.com <andreimpopescu@gmail.com> wrote:
> > On Sb, 06 iul 19, 15:36:37, Lee wrote:
> >>
> >> "an accident waiting to happen" was from me and I also gave the rfc
> >> for mdns, so that's hardly "nothing of substance to support that
> >> view."  If you're having trouble finding the rfc, it's here
> >>   https://tools.ietf.org/html/rfc6762
> >
> > Care to elaborate though?
> 
> While reading about a security issue I came across the line "An
> insecure protocol will eventually be exploited." - which sounds right
> to me.  And the standard q&a for most security issues involving an
> insecure protocol seems to be
> q: how do i prevent <bad thing> from happening?
> a: by not allowing it in the first place.
> 
> Hopefully we're clear about my bias now :)

Indeed we are. Everyone has a bias of one sort or another. It is often
what makes things interesting.
> 
> > The dangers are not at all obvious to me, possibly because I haven't
> > used it much (if at all).
> 
> Read the first three paragraph of the "Security Considerations" section
>   https://tools.ietf.org/html/rfc6762#section-21
> 
> Assuming everything on the network is a trusted host is a dangerous
> assumption, so paragraph 1 is N/A
> 
> Assuming a trusted host won't get hacked is a dangerous assumption, so
> paragraph 3 is N/A.
> 
> All that's left is paragraph 2 -- and uninstalling whatever software
> uses mDNS :)

I am unsure your analysis necessarily leads to to the conclusion you
make. Perhaps it does for you, but the section is, after all, dealing
only with considerations. You have assessed them and come to a decision
which fits your situation. 

Anyway, thank you for this diligent response. It is differs somewhat
from

 > I'd also consider exterminating avahi with extreme prejudice,
 > i.e. 'aptpurge avahi-daemon'. Really simplifies things. Not
 > installing this software in the first place works even better.

This lead only to boltstering the OP's inate prejudices against software
he lacks understanding of and that does not fit into his world view..

-- 
Brian.

Thread

Re: Assorted arm-buster problems #1 Gene Heskett <gheskett@shentel.net> - 2019-07-04 03:10 +0200
  Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-04 09:20 +0200
    Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 10:50 +0200
      Re: Assorted arm-buster problems - network configuration Felix Miata <mrmazda@earthlink.net> - 2019-07-04 11:30 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 11:50 +0200
      Re: Assorted arm-buster problems - network configuration mick crane <mick.crane@gmail.com> - 2019-07-04 12:20 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 16:50 +0200
          Re: Assorted arm-buster problems - network configuration mick crane <mick.crane@gmail.com> - 2019-07-04 19:20 +0200
      Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-05 06:00 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 12:40 +0200
          Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 13:20 +0200
          Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 14:50 +0200
            Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 15:10 +0200
              Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 15:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:30 +0200
            Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:20 +0200
              Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-06 15:50 +0200
                Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-08 14:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-08 15:00 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-08 16:30 +0200
          Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 07:30 +0200
    Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 17:50 +0200
      Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-04 18:20 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 19:40 +0200
        Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-04 21:10 +0200
          Re: Assorted arm-buster problems - network configuration Tixy <tixy@yxit.co.uk> - 2019-07-04 22:00 +0200
            Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-04 22:10 +0200
              Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-04 22:50 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-04 22:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 11:10 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 09:00 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 11:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 19:30 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-05 20:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 13:00 +0200
                Re: Assorted arm-buster problems - network configuration Tixy <tixy@yxit.co.uk> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:40 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 17:50 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-05 19:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:30 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-05 13:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 18:00 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-05 14:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 20:40 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 06:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 10:40 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-05 11:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 16:30 +0200
                Re: Assorted arm-buster problems - network configuration Greg Wooledge <wooledg@eeg.ccf.org> - 2019-07-05 15:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 02:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 21:30 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-05 22:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-05 22:30 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-05 22:50 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-06 10:20 +0200
                Re: Assorted arm-buster problems - network configuration <tomas@tuxteam.de> - 2019-07-06 12:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-06 21:40 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 08:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 19:40 +0200
                Re: Assorted arm-buster problems - network configuration Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-08 20:10 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 20:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-08 21:50 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 23:20 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-08 21:20 +0200
                Re: Assorted arm-buster problems - network configuration Curt <curty@free.fr> - 2019-07-07 11:00 +0200
                Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-08 19:50 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:40 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-06 21:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 00:20 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 06:20 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 07:00 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 17:10 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 09:00 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 13:20 +0200
                Re: Assorted arm-buster problems - network configuration Jonas Smedegaard <jonas@jones.dk> - 2019-07-07 14:50 +0200
                Re: Assorted arm-buster problems - network configuration Andrei POPESCU <andreimpopescu@gmail.com> - 2019-07-07 18:30 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 23:00 +0200
                Re: Assorted arm-buster problems - network configuration Reco <recoverym4n@enotuniq.net> - 2019-07-07 22:00 +0200
                Re: Assorted arm-buster problems - network configuration Brian <ad44@cityscape.co.uk> - 2019-07-08 20:30 +0200
              Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-04 23:00 +0200
      Re: Assorted arm-buster problems - network configuration Lee <ler762@gmail.com> - 2019-07-04 19:50 +0200
      Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-04 22:50 +0200
        Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-05 12:10 +0200
          Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-05 18:10 +0200
            Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-06 03:20 +0200
              Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-06 07:10 +0200
              Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-06 18:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 02:40 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 03:40 +0200
                Re: Assorted arm-buster problems - network configuration David Wright <deblis@lionunicorn.co.uk> - 2019-07-07 06:30 +0200
                Re: Assorted arm-buster problems - network configuration andreimpopescu@gmail.com - 2019-07-07 09:10 +0200
                Re: Assorted arm-buster problems - network configuration Gene Heskett <gheskett@shentel.net> - 2019-07-07 13:30 +0200

csiph-web