News for hackers. Stuff that matters.

A comment on Hacker deleted all of NewsBlur’s Mongo data and is now holding the data hostage. Parent comment

Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by beermonster on Thursday June 24, 2021 @12:44AM (#27614066)
Debian has no firewall rules by default. Up until recently also home directory permissions that were not good for multi user systems. Both by design.

Defaults are often insecure but maximise interoperability or general usability. Look at Windows !

[ Parent | on HN ]
Re:Hacker deleted all of NewsBlur’s Mongo data and is now ho... by jacquesm on Thursday June 24, 2021 @01:23AM (#27614236)
Yes, Debian - and Ubuntu, for that matter - have some pretty bad defaults in some places. Having users' homedirs UGO rwxr-xr-x is pretty bad.

The defaults should be secure with explicit unlock steps for those that know their environment well enough that they can explicitly relax some restrictions.

[ Parent | on HN ]