Yes, but exactly that was/is the issue of this bug. cups-browsed was attaching itself to every available IP on the system. And cups-browsed can’t only be bind to localhost, it would defeat the whole purpose of that tool. For it to be able to find other printers in the network it needs to be bound to a non-localhost-IP address. So, not much to sandbox
No port forwarding needed when the ISP provides a proper IPv6 subnet. Normal IPv6 router advertisement will then provide a public reachable address for every IPv6 capable device.
But with the size of IPv6 it makes searching for that not really easy, so it only a small attack vector.
I have cups (but not cups-browsed) installed, but I only start the service when I need to print something a few times a year. Until then it is only a binary sitting in a folder, nothing more.
I don’t know if I would like to have my personal data that I needed to print out on any system in a print shop. Printers and Copy machines in print shops often have internal HDD where the files are stored for caching reasons, often for months or even years (depending of the size of the HDD and how much the device is used) until some internal cleanup process deletes them.
I fear that the situation will not be better after nearly a decade.
Just read http://judecnelson.blogspot.fr/2014/09/systemd-biggest-fallacies.html and I see now that I was in error with my claim. So yes, I accept all the down votes in shame.
You do know that systemd is modular and every part of it does only one thing? Don’t see a real conflict with the Unix Philosphy
it is a short tube inside the cloaca used as a outlet for the sperm so it can flow out of the male cloaca.
If by “fuc” you mean pushing cloaca at each other then yes they fuck. But for most bird species males don’t have a penis for penetration
This is the place where the hidden ancient civilization of P’zz’r lives, a mystical forgotten place deep in the earth
Yes and I have to do that on every device, and when it breaks I have to invest time to look it up, maybe have to wait for days before updated tools are available then install those on all the devices again, and again, and again, and again, and again, and again, for infinity. It is such a waste of time in my eyes, myself and my time is worth more then that.
And how does that help with any of the questions I asked? It may be a possibility but it is neither easy, nor comfortable, and it takes way more time to keep that up to date then it is worth. It may be great for you, maybe you are young or alone or have for whatever reason else time to waste on that. I pay and have it work on every device without any further work or time investment. It just works!
And how do I install uBlock origin into my living room television? How into the YouTube app on my Chromecast? Sure I could use Firefox on that but that will break any chance of sending YouTube videos from a phone to the Chromecast, so not really a valid option. How into the PS5? How install it into any kind of mobile apple device? How into all kinds of mobile YouTube music applications? Yes, it is easy when the only way to consume YouTube is via Webbrowser and even that gets more and more complicated whenever google changes something to block ad blockers.
I pay for that, because YouTube and YouTube Music is the main source of media for me And my family and I have no issue with paying for a service that I use a lot. And paying for that is so much easier then investing huge amounts of time into searching for and maintaining alternative Players and Tools for all the different devices where I (and my family) consume YouTube and YouTube Music. My limited time is more valuable for me then the price for the service.
Strange but interesting, thank you!😊
Sounds like you want savapage https://www.savapage.org/
It by default runs on its own port but that is easy fixable with a reverse proxy.
Is it then also the “state of being poisoned-ring”?
The structure is changing, many distributions already are merging more and more of the duplicated subdirectories in /usr/ with the counterparts in / but it takes time to complete that and at the moment those subdirectories are often still there but as symlinks to be compatible with older software (and sysadmins).
Yes, that is true. I was speaking in the context of very early Unix/Linux before initrd was a thing.
Unfortunately many of the routers provided by ISPs I have seen where not configured that way by default. They only used NAT as firewall, so without configured port forwarding nothing could be reached with IPv4. But for IPv6: If you know the IPv6 for any system on the local network it is free available on all ports. It is the first thing I check when someone asks me to check their network or configure their internet, and only Fritz!Box have a sane default for IPv6 (but to be honest my other experiences are mostly with shitty Vodafone and german Telekom routers so it is a very limited set, and I really hope that most others are better.)