[68502] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: UPnP

daemon@ATHENA.MIT.EDU (Henry Linneweh)
Sat Mar 13 04:51:05 2004

Date: Sat, 13 Mar 2004 01:50:31 -0800 (PST)
From: Henry Linneweh <hrlinneweh@sbcglobal.net>
To: Sean Donelan <sean@donelan.com>,
	"nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <Pine.GSO.4.58.0403130159540.984@clifden.donelan.com>
Errors-To: owner-nanog-outgoing@merit.edu


--0-1479273998-1079171431=:23549
Content-Type: text/plain; charset=us-ascii

That reads more like a person who is customer centric with an acceptable idea...
 
-Henry

Sean Donelan <sean@donelan.com> wrote:

On Fri, 12 Mar 2004, James Edwards wrote:
> I see a lot of unicast UPnP traffic on my networks.
> UPnP seems like a train wreck waiting to happen, to me.

Yep. Giving insecure PC's the power to change firewall settings. Doesn't
sound like the cleverest idea.

I have a firewall, my computer can't be a zombie. Yes, I click on every
attachment I see and install every program any random web site offers me,
but I have a firewall so my computer can't be a zombie :-(

But it does demostrate that people really, really want to run their
applications no matter how we try to stop them. Instead of blocking
people from running their applications, can we figure out better ways
for them to run them safely?
--0-1479273998-1079171431=:23549
Content-Type: text/html; charset=us-ascii

<DIV>That reads more like a person who is customer centric with an acceptable idea...</DIV>
<DIV>&nbsp;</DIV>
<DIV>-Henry<BR><BR><B><I>Sean Donelan &lt;sean@donelan.com&gt;</I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid"><BR>On Fri, 12 Mar 2004, James Edwards wrote:<BR>&gt; I see a lot of unicast UPnP traffic on my networks.<BR>&gt; UPnP seems like a train wreck waiting to happen, to me.<BR><BR>Yep. Giving insecure PC's the power to change firewall settings. Doesn't<BR>sound like the cleverest idea.<BR><BR>I have a firewall, my computer can't be a zombie. Yes, I click on every<BR>attachment I see and install every program any random web site offers me,<BR>but I have a firewall so my computer can't be a zombie :-(<BR><BR>But it does demostrate that people really, really want to run their<BR>applications no matter how we try to stop them. Instead of blocking<BR>people from running their applications, can we figure out better ways<BR>for them to run them safely?</BLOCKQUOTE>
--0-1479273998-1079171431=:23549--

home help back first fref pref prev next nref lref last post