[asterisk-users] allowguest defaults to yes for SIP

[SIP]

Eh... if VoIP fraud weren't so rampant, and I didn't constantly see
mailings to the Asterisk list about "How do I secure my system from the
people who've been costing me tons of money lately," I would say that
having a lax stance on security in exchange for additional usability
might be a good thing.  But as is, that's simply not the case. The
'usability' you get from this is really only questionably essential in
its ability to save time, but the security one would get from a change
could save some people actual money -- not just time.

As someone who used to design systems and networks, I would vote for
security over nebulous desire to keep the status quo.

True, you can't keep stupid people from doing stupid things, but given a
choice between protecting the ignorant from a bad situation or catering
to those who want to avoid an extra step or two on installation, I'd
side with protecting the ignorant every time. There's always a trade-off
between usability and security, and I'm of the opinion that security is
the more important of the two when dealing with systems connected to the
Internet. Call me a cynic. :)

N.


Danny Nicholas wrote:
> "Gentlemens clubs" usually don't have any.  While LH probably has a valid
> point, jumping on Til isn't the way to bring it home.  You can't protect the
> stupid or lazy from themselves.  If you can't do this right, pay someone
> else to.
>
> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com
> [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Lee Howard
> Sent: Thursday, November 12, 2009 12:48 PM
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [asterisk-users] allowguest defaults to yes for SIP
>
> Tilghman Lesher wrote:
>   
>> The issue in question was suspended, while the reporter makes the case on
>>     
> the
>   
>> Asterisk-dev mailing list, which is not this list.  The opinions there
>>     
> amongst 
>   
>> contributors (meritocracy, not democracy) are that keeping the sample
>> configuration as it is now is probably the way to go.
>>   
>>     
>
> Sigh... of course.  It's a gentlemen's club and only members have a say.
>
>   
>> If you want to create a new issue and attach your patch there, I'll look
>>     
> at
>   
>> it.
>>     
>
> I sent a patch.  I pointed you at a case.  That should have been FAR 
> more than enough for my attempt at contribution to be acceptable.
>
> Thanks,
>
> Lee.
>
> _______________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>
>
> _______________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users
>