On May 06, Christoph Anton Mitterer <cales...@scientia.net> wrote:

> 1) IMHO, services/daemons (e.g. apache, ejabberd, etc.) that listen per
> default on the network (unless loopback only) shouldn't be started per
> default, after being installed.
This has been discussed over and over, I think with a clear consensus: 
installed software should work. If you do not want a service to act like 
a service then do not install it.

> The usually come only with a default config which may not be hardened
> enough for the local system, and that short time may already be enough
> for an attacker to attack.
[citation needed]

-- 
ciao,
Marco

Attachment: signature.asc
Description: Digital signature

Reply via email to