Re: [RFR] templates://openvas-server/{openvas-server.templates}
On Sunday 04 January 2009 15:49:52 Christian Perrier wrote:
> Quoting Justin B Rye (jbr@edlug.org.uk):
> > It works okay, but you've already said "please", so it can afford to
> > be less round-about:
> >
> > OpenVAS clients will not connect to servers with expired
> > certificates, so you should choose a duration longer than the time you
> > plan to run this server.
>
> Great. Adopted...just like all other suggeston, as always...
>
> > Looks fine, except that I'd hyphenate "two-letter". Wait, isn't
> > there a default/example text? (It may seem too obvious to need one,
> > but, well, I live in a country with two different competing
> > two-letter codes).
>
> We could suggest a default to "US" (or "GB" to at least save the poor
> British citizens the dilemna of UK|GB).
>
> > > Template: openvas-server/province
> > > Type: string
> > > -_Description: Your state or province:
> > > - Enter the state or provice you reside in.
> > > +_Description: State or province:
> > > + Please enter the state or province where this server resides.
> > >
> > > Removing the "Your". Where *I* live is not relevant. What's relevant
> > > is the location of my server or the location of my organization.
> >
> > The phrase "state or province" seems to be official X.809ese, though
> > again it's an awkward one for Brits - does it want "Borough of North
> > East Lincolnshire Unitary Authority" or does it want "England"?
>
> The same problem is true for most countries. The proposed wording is
> the most common in such situations and we can hope that citizens of
> countries with weird subdivision schemes already know how to cope with
> this (so no need to point them back to ISO-3166-2...).
>
> > (It seems to me that the number one fact people need to know about
> > OpenVAS is that it's effectively FreeNessus, now that the Nessus3
> > license has gone proprietary. But even the project homepage doesn't
> > bother to mention that.)
>
> You're right. Maintainers, is the omission of Nessus deliberate or
> not?
>
> I indeed ignored that OpenVAS is the free fork of Nessus until Justin
> mentioned it and I would have welcomed to leanr about it.
Quote from the main project home page at http://www.openvas.org/:
> OpenVAS stands for Open Vulnerability Assessment System and is a network
> security scanner with associated tools like a graphical user front-end. The
> core component is a server with a set of network vulnerability tests (NVTs)
> to detect security problems in remote systems and applications.
>
> OpenVAS products are Free Software under GNU GPL ***and a fork of Nessus.***
Note the keyword are highlighted. We do acknowledge that we are a fork of
Nessus however when I originally named the project GNessUs this caused
problems with Tenable who made accusations that the project was attempting to
pass off on their trademark. Rather than argue over something trivial, I
backed down and invited the community to choose a name, and thus OpenVAS was
adopted. Just something to consider when describing it as FreeNessus which
is a rather *contentious* point in the eyes of some.
Cheers,
Tim
--
Tim Brown
<mailto:timb@nth-dimension.org.uk>
<http://www.nth-dimension.org.uk/>
Reply to: