Reply to thread

Message

<blockquote data-quote="cubemon" data-source="post: 972472" data-attributes="member: 137737">Thank you. Finally someone understands.&nbsp;&nbsp;Except, if you don't run your web browser as root (which you shouldn't), then only your user data is compromised, not your whole system.&nbsp;&nbsp;When I had created the database with all the rights, the installer still insisted it needed access to MySQL's mysql (the one storing users and other stuff) database. I found no way to continue without granting root access.&nbsp;<ul>
<li data-xf-list-type="ul"></li>
</ul>I appreciate finally reaching someone who appreciates the security angle of the case. While most people may not even understand why this is important and don't want to deal with it, it's the same attitude that allows spammers to run huge bot networks and personal information to be stolen. If you run everything as root, you are asking for trouble, simply put.&nbsp;I was simply the messenger. I was trying to point out a design flaw that prevents people from using your software. Considering that, it's a bit harsh to start berating me and calling me a troll. Why would I want to put in time to fix things, when the community is like this?&nbsp;I might have been repeating myself, but that was because people didn't understand the security viewpoint of things, or they just didn't care enough to find out, what this was all about.&nbsp;I still hope this issue gets fixed in a future version of your software.</blockquote>

[QUOTE="cubemon, post: 972472, member: 137737"] Thank you. Finally someone understands. Except, if you don't run your web browser as root (which you shouldn't), then only your user data is compromised, not your whole system. When I had created the database with all the rights, the installer still insisted it needed access to MySQL's mysql (the one storing users and other stuff) database. I found no way to continue without granting root access. [LIST] [/LIST] I appreciate finally reaching someone who appreciates the security angle of the case. While most people may not even understand why this is important and don't want to deal with it, it's the same attitude that allows spammers to run huge bot networks and personal information to be stolen. If you run everything as root, you are asking for trouble, simply put. I was simply the messenger. I was trying to point out a design flaw that prevents people from using your software. Considering that, it's a bit harsh to start berating me and calling me a troll. Why would I want to put in time to fix things, when the community is like this? I might have been repeating myself, but that was because people didn't understand the security viewpoint of things, or they just didn't care enough to find out, what this was all about. I still hope this issue gets fixed in a future version of your software. [/QUOTE]

Verification