Post AmfUncY47QMHvy3qIC by sfalken@mastodon.naturalorder.me
(DIR) More posts by sfalken@mastodon.naturalorder.me
(DIR) Post #Ame1mbZRB3bgmauFDU by BrodieOnLinux@mstdn.social
2024-10-03T23:32:02Z
0 likes, 0 repeats
This is a hilarious comment in the context of the cups vulnerability
(DIR) Post #Ame3GwPSMYJm3VGbzM by Conan_Kudo@fosstodon.org
2024-10-03T23:48:43Z
0 likes, 0 repeats
@BrodieOnLinux Where is @sfalken posting this?
(DIR) Post #Ame41tWstAvOjW89DM by BrodieOnLinux@mstdn.social
2024-10-03T23:57:13Z
0 likes, 0 repeats
@Conan_Kudo @sfalken It was this post https://forums.opensuse.org/t/i-think-firewalld-is-needed-in-aeon-kalpa/171762
(DIR) Post #AmeGVseXuX5a9VmLvE by eliteamdgamer@mastodon.social
2024-10-04T02:17:05Z
0 likes, 0 repeats
@BrodieOnLinux that is fantastic. I love it. 
(DIR) Post #AmeRfxy06lQb1ZtH0a by Conan_Kudo@fosstodon.org
2024-10-04T04:22:09Z
0 likes, 0 repeats
@BrodieOnLinux @sfalken I actually kind of think that a firewall *does* make sense to be shipped on a desktop Linux environment with most ports closed by default for the sole reason that the dominant form factor now is a laptop and connecting to public networks without a system-level firewall is asking for trouble...
(DIR) Post #AmeRop1AkVAfsOb3fk by Conan_Kudo@fosstodon.org
2024-10-04T04:23:46Z
1 likes, 0 repeats
@BrodieOnLinux @sfalken I actually kind of think that a firewall *does* make sense to be shipped on a desktop Linux environment with most ports closed by default for the sole reason that the dominant form factor now is a laptop and connecting to public networks without a system-level firewall is asking for trouble...What we need though is NetworkManager to bind each network to a particular firewall zone (similar to what Windows does). That way, we can be smarter about firewall rules.
(DIR) Post #AmfUncY47QMHvy3qIC by sfalken@mastodon.naturalorder.me
2024-10-04T16:31:48Z
0 likes, 0 repeats
@BrodieOnLinux I still stand by my take. If somebody develops a firewall frontend that makes it more workable for a desktop focused distribution like Kalpa, sure, I'm interested. But at the moment, I still don't see the benefit, from a development and support perspective.The CUPS vulnerability is mostly a nothingburger as far as I'm concerned.Maybe I'm right, maybe I'm wrong, I've been wrong before, and I'll be wrong again in the future, I'm sure.
(DIR) Post #Amfe44slRPJs1xfHIO by 10leej@fosstodon.org
2024-10-04T18:15:41Z
0 likes, 0 repeats
@Conan_Kudo @BrodieOnLinux @sfalken doesn't opensuse wicked do this? I might be wrong but I believe I read about it at some point.
(DIR) Post #Amfeh6FmHE3VZq2JVY by Conan_Kudo@fosstodon.org
2024-10-04T18:22:44Z
0 likes, 0 repeats
@10leej @BrodieOnLinux @sfalken Probably? @NetworkManager does it too, but the functionality is unused.
(DIR) Post #AmfmqvYvgEX4wrBvrE by karolherbst@chaos.social
2024-10-04T06:53:20Z
0 likes, 0 repeats
@Conan_Kudo @BrodieOnLinux @sfalken that already exists and works
(DIR) Post #AmfmqwFp6kqN5tGBiS by Conan_Kudo@fosstodon.org
2024-10-04T12:11:26Z
0 likes, 0 repeats
@karolherbst @BrodieOnLinux @sfalken No desktop prompts on first connection to a Wi-Fi network whether the network is public, home, or work network to set it to the correct zone. So it is effectively unused.
(DIR) Post #Amfmqwx4VxRFG1Uj7w by karolherbst@chaos.social
2024-10-04T12:13:57Z
0 likes, 0 repeats
@Conan_Kudo @BrodieOnLinux @sfalken sure, but that's an UX issue and the people needing holes in the firewall usually know what to do. But sure, the UX could be changed, but that's not a Networkmanager problem, but a desktop one. So Gnome/Kde/etc... would have to change that.
(DIR) Post #AmfmqxYeGFUp8Z4jhI by Conan_Kudo@fosstodon.org
2024-10-04T13:29:14Z
0 likes, 0 repeats
@karolherbst @BrodieOnLinux @sfalken Yes, but until that happens, it doesn't work as expected.It looks like there's a bug for this for KDE already: https://bugs.kde.org/show_bug.cgi?id=425656Hopefully with this recent scare, we might see more development on this front.
(DIR) Post #AmfmqyDlnMODC6JZnE by siosm@floss.social
2024-10-04T19:49:26Z
0 likes, 0 repeats
@Conan_Kudo @karolherbst @BrodieOnLinux @sfalken Prompting users on network join is not good a time. 99% of the time, the user is just looking to get online to look at something on the internet, not to use advanced local networking features.The network zone should be set to public by default for all new networks and the setting UI should instead offer to loosen the network restrictions in the printing, network shares, etc. pages which is where users would set those things up.
(DIR) Post #Amh1vJruweEFxgaLeS by NetworkManager@fosstodon.org
2024-10-05T09:05:05Z
1 likes, 0 repeats
@Conan_Kudo @10leej @BrodieOnLinux @sfalken NetworkManager is very good actually