[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [OpenVerse] where do I put the button!?



Thus spake Jon Winters (winters@obscurasite.com):

> On Fri, 3 Dec 1999, Hell Fire wrote:
> 
> > 
> > I'm afraid I'm going to have to agree with David T on this one..
> > 
> > easy server startup (by inexperienced users) means that people who
> > probably don't fully understand security considerations would be
> > able to easily open a potential door to their system.
> 
> Perhaps it might be a good idea to do it with a warning of the possible
> security implications.  The fastest way to grow the userbase and number of
> servers online at any given time is to make things very easy.  If security
> issues are documented then the newbee is learning how to set up the server
> and learning a little bit about security.  
> 
> The rapid increase in the number of servers will also help in the testing
> and development of Openverse.  (and quite possibly the plugging of any
> security holes)
> 
> Discouraging folks from setting up servers because we're afraid Openverse
> is a security risk is not doing much at all for the project.
> 
> --
> Jon Winters http://www.obscurasite.com/
> OpenVerse  http://www.openverse.org/
> 

The major reason I think it best to keep server setup on a more advanced level
is just that - if the user is more advanced, it will prove trivial to set one up
 - if not, then yes, they should be informed about security issues in general, but
a quick disclaimer usually just gets ignored, and an over-wordy one can make even an
advanced user nervous about the software's reliability factor...

I admit I'm not too closely tied to the project, so you can weigh that when considering
my input, but I just think that server operation (in the case of _any_ software) should
be left to the advanced users who seek it out.  On the other hand, a well written and
clear disclaimer might be just the thing to make the technology more readily applicable
and widely spread.

-HF
----------------------------------------------------------
To unsubscribe to the OpenVerse mailing list send a message to
openverse-request with the following word in the BODY of the message.
UNSUBSCRIBE
If you need assistance from a human, email cruise@openverse.org
----------------------------------------------------------