News for hackers. Stuff that matters.

A comment on What I learned while securing Ubuntu (2015). Parent comment

Re:What I learned while securing Ubuntu (2015) by jldugger on Friday June 10, 2016 @05:51PM (#11880378)
> installing a poorly configured package (that does leave a port open) means a potential security hole that could easily be prevented.

Please share with us what magic you have that prevents human error locally, but is defeated by human error in packaging.

[ Parent | on HN ]
Re:What I learned while securing Ubuntu (2015) by daveguy on Friday June 10, 2016 @07:39PM (#11881053)
Well, I wouldn't call a firewall magic, but that's what it does. If a package is setup so the software listens to 0.0.0.0 (all networks) on a particular port then the firewall will prevent incoming attacks. Opening the firewall port is an extra step that requires two misconfigurations rather than one. Look up fail-safe for more reading.
[ Parent | on HN ]