In data sabato 17 giugno 2023 20:46:46 CEST, Carlos E. R. ha scritto:

On 2023-06-17 20:01, Manfred Neubauer wrote:

...

Sehr geehrte Damen und Herren ich möchte Ihnen mitteilen, dass mir auf LEAP 15.5 dauerhaft dauerhaft ein roter Bildschirm meine Arbeit beendete. Überdies erhielt ichNachrichten wie ' Security policy Violation ' ich dachte könnte ein Laptop von 2000 Euro in die Tonne werfen. Desweiteren gibt es einen offenen ' Remote Login ' Ich konnte Leap 15.5 komplett löschen. Ich denke Nur eine KI kann so schnell auf Versuche reagieren. Armes Deutschland, wenn wir alle von einer KI gesteuert werden.

Aus diesem Grund verabschiede ich von Ihnen.

Dr. Neubauer

PS. wenn Sie die Leute besser informieren, würde vieles besser laufen.

I am sorry, but this is an international support mail list, in English. I don't understand a word of what you say, even using an automated translator.

If you don't speak English, you could use

Es tut mir leid, aber dies ist eine internationale Support-Mail-Liste in englischer Sprache. Ich verstehe kein Wort von dem, was Sie sagen, selbst wenn ich einen automatischen Übersetzer benutze.

Wenn Sie kein Englisch sprechen, können Sie benutzen.

Automatisierte Übersetzung durch DeepL

-- Cheers / Saludos,

Carlos E. R. (from 15.4 x86_64 at Telcontar)

I did run it on DeepL but I doubt this has a clear content, somewhat a strange message. Do we have an open "remote login" port by default in Leap15.5??

Dear Sir or Madam I would like to inform you that on LEAP 15.5 permanently a red screen stopped my work. Moreover, I received messages like ' Security policy Violation ' I thought could throw a laptop of 2000 Euro in the garbage can. Furthermore there is an open ' Remote Login '. I was able to delete Leap 15.5 completely. I think Only an AI can react so quickly to attempts. Poor Germany, if we are all controlled by an AI.

For this reason, I say goodbye to you.

Dr. Neubauer

PS. if you inform people better, many things would go better.

So substantially he claims that you do ship a Leap 15.5 with an open remote port and that his system was hacked with the help of a AI. Not sure if that helps in any way. Does not say either whether he had any idea of Linux prior to install. I have the doubt that this is either the case (PEBKAK) or that this is a bait. Anyway. Cheers.

On 18.06.2023 14:51, Carlos E. R. wrote:

...

I did run it on DeepL but I doubt this has a clear content, somewhat a strange message. Do we have an open "remote login" port by default in Leap15.5??

Nope.

Yes. https://bugzilla.suse.com/show_bug.cgi?id=1211764

Unless you consider "ssh" to be that. It needs password.

So? The OP did not say "without password", he said "open".

There is a question on install asking if you want to have it or not.

Yes. And it defaults to enable and how many users actually read every line of installation summary (or for that matter understand every line of installation summary)?

In data domenica 18 giugno 2023 14:07:47 CEST, Andrei Borzenkov ha scritto:

On 18.06.2023 14:51, Carlos E. R. wrote:

...

...

I did run it on DeepL but I doubt this has a clear content, somewhat a strange message. Do we have an open "remote login" port by default in Leap15.5??> Nope.

Yes.

https://bugzilla.suse.com/show_bug.cgi?id=1211764

...

Unless you consider "ssh" to be that. It needs password.

So? The OP did not say "without password", he said "open".

...

There is a question on install asking if you want to have it or not.

Yes. And it defaults to enable and how many users actually read every line of installation summary (or for that matter understand every line of installation summary)? Well, it was set to open also when I installed TW on my laptop (where I did select closed).

I actually watch what I do when I do install, to the best effort (which means attended and reading the settings before clicking O.K. I think this should be possible for everyone (if you leave aside dislexic disorders). I prefer the attitude to let people open things instead of having them to watch out for closing them in time. YMMV.

On Sun, 18 Jun 2023 20:07:35 +0200 "Carlos E. R." wrote:

It is a problem when installing remotely, for those that forget to read that detail. The have no access to the newly installed machine.

Is it possible for the installer to detect that it is a remote installation? If so, then perhaps there's an obvious solution. Default to closed for local installations and default to open for a remote installation, but somehow ensure some sort of authorisation is required to be set up. If it's not possible to determine a remote installation (which I suspect is unlikely, but ...) then I'd suggest making it default to closed always, and giving a clear prompt to be confirmed. A person doing a remote installation is unlikely to make the same mistake twice! Thinking about security has moved on since the last decision was made I suspect. What was raspbian has had a fairly neat solution for years.