On May 06, Christoph Anton Mitterer <calestyo@scientia.net> wrote: > 1) IMHO, services/daemons (e.g. apache, ejabberd, etc.) that listen per > default on the network (unless loopback only) shouldn't be started per > default, after being installed. This has been discussed over and over, I think with a clear consensus: installed software should work. If you do not want a service to act like a service then do not install it. > The usually come only with a default config which may not be hardened > enough for the local system, and that short time may already be enough > for an attacker to attack. [citation needed] -- ciao, Marco
Attachment:
signature.asc
Description: Digital signature