Re: [gentoo-dev] Finger GLEP

[Tavis Ormandy <taviso@gentoo.org>]

On Sun, Aug 10, 2003 at 04:36:56PM -0700, Seemant Kulleen wrote:
> I'm inclined to agree with Kurt here.  I don't know that we should be
> opening more ports than necessary, for starters, and I don't know that
> the benefits necessarily outweigh the risks here. 

Sure, running services you dont need is never a good idea, but crippling
a box to be extra paranoid about security is a shame.

Besides, finger is a mature protocol and the implementations available
are widely used by some of the most respected
developers/projects/universities out there, and installed by default on
many systems, (Slackware, fex.) Finger is also really simple, you can 
audit it in a few hours if you want to.

> The idea for the
> devrel dev/herd/project pages will be to have a uniform portal to all
> sorts of info.
> 

thats cool, but im certain keeping a .plan up to date will be easier
than updating a webpage, and distributing keys with finger couldnt be
simpler.

imho, running fingerd also says something about a project..UNIX
heritage, classic internet, and things like that :)

-- 
-------------------------------------
taviso@sdf.lonestar.org | finger me for my gpg key.
-------------------------------------------------------

--
gentoo-dev@gentoo.org mailing list