[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Netscape as root, sndconfig



Because Stevenson failed to attribute, I can't figure out who >> > > > is,
but that person wasn't being helpful.  A one line answer is appropriate
sometimes, when that one line actually aids the person in question to do
what they asked.  Otherwise, they're just wasting breath.  However, I too
am getting tired of doctrinaire things like the . in $PATH, telnet
vulnerabilities and so forth being quoted as the Holy Gospel, and like the
Holy Gospel, supposed to be accepted on faith alone.  Telnet is a security
hazard because everything goes over in the clear, making the session
snoopable and vulnerable to password sniffing programs like dsniff.  If
you haven't seen firsthand how many passwords you can harvest on the
average network, you have no business slamming telnet (pop3 is
actually the biggest culprit: it tends to resend passwords on a periodic
basis).

On Wed, 15 Aug 2001, Nathan E Norman wrote:

>On Wed, Aug 15, 2001 at 08:25:07AM -0400, Hall Stevenson wrote:
>> > > > > I recently installed Netscape Communicator,
>> > > > > which works great, except that I can't run it
>> > > > > as root due to "security reasons". Does anyone
>> > > > > know how I can get around this?
>> > > >
>> > > > Don't run it as root.
>> >
>> > hmmm, not the most useful answer I have ever seen,
>> > edit the file /etc/netscape4/config and either uncomment
>> > the line which says ALLOW_ROOT=yes or add it to
>> > the config file.
>> >
>> > Again:  don't run it as root.
>>
>> Again, he asked *how* to do it. He didn't ask for people's
>> opinions on whether or not he should. It's his business if
>> he's runs it as root. It's his system.
>
>Ah, I see we will now look forward to posts from you condemning people
>who suggest "kernel-package" when asked "why didn't my kernel compile
>work; I used 'make bzlilo'", posts which point out that including "."
>in your PATH is a bad idea, posts which conclude telnet is a security
>risk ...
>
>

-- 
There is no problem so great that it cannot be solved with suitable
application of High Explosives.

Who is John Galt?  galt@inconnu.isu.edu, that's who!



Reply to: