RE: [cobalt-users] Closing the doors [Was RE: Linux differences]

[Rodolfo Paiz <rpaiz@xxxxxxxxxxxxxx>]

> > I'm familiar with Unix, and don't want to wade through
> > linux books just to find the differences from normal
> > Unix systems.

There is no such thing as a normal Unix.

> Am I being excessively cynical in my old age, or does this 
> seem like troll-like to anyone else?

It does sound bad, but I've kept track of some of Ian's posts, and he's a normal member of the community. Not the prettiest face you've ever seen (wink, just kidding!!!) but certainly has all the appearance of being a fine upstanding member of the community.

As for excessively cynical... just because I'm paranoid doesn't mean they're not out to get me. <grin> Cynical and paranoid are not good/bad... they are *necessary* in this business.

Come on, Ian, don't get mad. It was easy to take it as a personal affront, but Colin certainly didn't mean it that way (right Colin?) Cool down, kiss, make up... no offense intended.

> ----------<scenario>
<snip>
> 4. Subscription to 
> "cobalt-[announce|users|security|developers]@list.cobalt.com 
> *requires* valid "Registration Code" to be subscribed.
> ----------</scenario>
> Why??? 
> I think we have innumerable non-cobalt owners on these lists. 

For all intents and purposes, I am one of those now. My Qube2 is being phased out in favor of the RH7 box which has caused me so much work to set up. (And let me tell you, there *IS* a difference between setting up my Qube in 6 minutes flat when I knew nothing and setting up my RedHat server in three weeks of mad reading...) Please don't lock me out of the list.

I also subscribed to this list *before* I bought the Qube, and I've seen many a post on "I'm thinking of buying one..." These people would also be locked out.

> Unfortunately I think we have a significant script 
> kiddie population also, together with others who have less 
> than noble intent. 

Unfortunately I think you're right. But you've hit all the important issues in your post, both good and bad. And I come down to the same conclusion: the good thing is that this is a public list, and the bad thing is that this is a public list.

I think it has to stay open (also remember, even if it was Cobalt-owners it's still archived on MARC and Google so anyone can read it and harvest email addresses and troll for weak systems or sysadmins). But I also concur with someone (don't recall whom) who said that this is a public list and that you should *never* post any information that will help someone hack you.

I sweated bullets for months after one post where I mentioned my actual IP numbers and system configuration, then realized how foolish I'd been. I've never even mentioned that post again until now, when I've finished changing my entire configuration and even operate on a different subnet.

> This isn't flame-bait in any way. I would value the opinion 
> of some of the great thinkers on this list. Jeff Lasman, 
> Rodolfo, Thom, Carrie, Zeffie, flash[gsh], et al. 

Heady company in which I find myself. I'm not sure I deserve that, but thank you anyway.

> So...whaddya think? Why am I hobbling around with bullet 
> holes in both feet? <laugh>

Because you're talking about security. Thus your feet come with built-in bullet holes, and you need to go around closing them while people keep shooting at you. Again, don't remember the source, but someone yesterday or today said:

If hackers scare you, your machine isn't secure enough.
If hackers don't scare you, you don't understand security.

Amen.

-- 
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>