From owner-freebsd-security@freebsd.org Wed Jul 24 17:23:48 2019 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 826D3B2C4F for ; Wed, 24 Jul 2019 17:23:48 +0000 (UTC) (envelope-from aaron@heyaaron.com) Received: from mail-ua1-x931.google.com (mail-ua1-x931.google.com [IPv6:2607:f8b0:4864:20::931]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 152358FFF9 for ; Wed, 24 Jul 2019 17:23:47 +0000 (UTC) (envelope-from aaron@heyaaron.com) Received: by mail-ua1-x931.google.com with SMTP id a97so18717320uaa.9 for ; Wed, 24 Jul 2019 10:23:47 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=fkIZ7gOxMchez0kq2LjmXitb7hXFwhpjD+DhitKbYTE=; b=h10D+cbsGDN5j8SMvADDSEPfbD0ZzQ0Wpds4l6flkhQdlgze2dL1pmtauwQWbcYhKv jdQPmig2TS9N67s4Kev7QLfrc7Gtz8vSCsd4zYKOrwgQ5+t/lCpRdEvJnLHmUA2vHbPX /0g7rn9JAsfEfdQNfnHe5TG1sHU/YYCH+mjzmXgRkgfJ7nE8b2LsMYbwVw0WF19/PopH KYC7bd8DW7A7OfC5SMLD66qS+GEA/7O5V6WjK8uU0uf6dI0SYYuOunea3zFk+sspPqco a8l9FcOOuqRgS95OyzUlL4mwxu6tln5JHuJJePBxgdCRo3RslYEaFXl5cURR/lZZ+MqT AsIQ== X-Gm-Message-State: APjAAAUC2a5f/982N4XV+lAICEcd7V+5yRsk/Orms9ePj8b676Kapzx0 VwwhGsDB434YJt3B7wjZRUY8XEnGZfNvg63yP0fcA2J9 X-Google-Smtp-Source: APXvYqz4RQWKhdRf4/dPW6dK17C0maXrsJqZYfrdCyYWFFgV94k0fN8acQavQwziiv5WHybK0C+gTE2V0Qie4BrS9MA= X-Received: by 2002:ab0:7384:: with SMTP id l4mr42689664uap.8.1563989026035; Wed, 24 Jul 2019 10:23:46 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "Aaron C. de Bruyn" Date: Wed, 24 Jul 2019 10:23:29 -0700 Message-ID: Subject: Re: Old Stuff To: Robert Simmons Cc: freebsd-security@freebsd.org X-Rspamd-Queue-Id: 152358FFF9 X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.92 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[heyaaron.com:s=201609]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; MX_GOOD(-0.01)[alt1.aspmx.l.google.com,aspmx.l.google.com,aspmx3.googlemail.com,aspmx5.googlemail.com,aspmx2.googlemail.com,alt2.aspmx.l.google.com,aspmx4.googlemail.com]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[heyaaron.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[heyaaron.com,reject]; RCVD_IN_DNSWL_NONE(0.00)[1.3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.99)[-0.985,0]; IP_SCORE(-2.92)[ip: (-9.05), ipnet: 2607:f8b0::/32(-3.09), asn: 15169(-2.43), country: US(-0.05)]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jul 2019 17:23:48 -0000 Why remove telnet and FTP? Sure--it's insecure if you're using it over the internet, but I use it on my laptop at least a few times per year. I have a small 8-port switch where I plug in my laptop, then plug in an APC UPS and access it via telnet (and use FTP as well) to upgrade the firmware from a version that only supports SSHv1 to something newer. It's not insecure when used in that manner. -A On Wed, Jul 24, 2019 at 9:58 AM Robert Simmons wrote: > I wonder if FreeBSD should drop support for 32bit? Clean out and remove all > of it. It should make the code base easier to maintain, cleaner, and safer. > > In this same vein, let's deprecate and remove things like telnet and ftp. > _______________________________________________ > freebsd-security@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org > " >