On Thu 04 Jul 2019 at 22:05:09 +0200, to...@tuxteam.de wrote: > On Thu, Jul 04, 2019 at 08:56:45PM +0100, Tixy wrote: > > On Thu, 2019-07-04 at 20:01 +0100, Brian wrote: > > > On Thu 04 Jul 2019 at 19:18:13 +0300, Reco wrote: > > > > > > [...] > > > > > > > I'd also consider exterminating avahi with extreme prejudice, i.e. > > > > 'apt > > > > purge avahi-daemon'. Really simplifies things. Not installing this > > > > software in the first place works even better. > > > > > > Gene Heskett can follow this advice if he wishes. It is to be hoped > > > that every other user ignores it. > > > > Why? It's advice I decided for myself 10 or more years ago after seeing > > constant reports of zeroconf bugs in various OSes and kit, and > > realising that sort of thing was also running on my Linux machines. The > > whole idea of automagically setting up networks just sounds like a > > problem and security hole waiting to happen. So I decided to nuke it > > from orbit, it was the only safe thing to do. > > As always, all generalizations suck. Some do avahi, others don't (full > disclosure: I am in the "don't" camp, as many may have guessed :-)
If nobody objects I would like to reword that statement. Many, many users will have avahi-daemon on their systems; a few won't. The idea that > Not installing this software in the first place works even better. requires clarification. -- Brian.