So "compartmentalize" them all you want with public addresses. It really doesn't matter if your air conditioner is at 192.168.74.91 or 206.221.38.55. You're just losing NAT and non-unique addresses and gaining more work when you renumber (which IPv6 makes easier).

Nobody wants to expose all their internal addresses. Period. Which part of that can you dumb fucks not understand? No organisation is going to want to implement that.

Exposing your internal addresses should be irrelevant to security unless you're doing something else wrong. Those of us that understand that are OK with our internal addresses being exposed and want them to be. A lot of organizations already do implement that even with IPv4. Which part of that do you dumb fucks not understand?

That does nothing to solve the problem. Even if they somehow got a trusted CA to sign a separate routerlogin.net cert for every router they made an attacker could still use any one of them to spoof.

Lawns and streets and certain radio frequencies are not the private property of AT&T and Comcast (FTFY). You are quite naive if you think that they have to have access to this property. If people and local governments do not give them access to this property, they would not exist.

I really don't care if anybody hacks it.

Well other people do. I wouldn't mind fewer machines in botnets trying to send me spam or DDoS me off the net.

Sounds like some pretty neat duct tape.

Does any IDS or IPS actually do that?

It might be covert if you support starttls. I agree, best to apply the patches...

Except a brief run of ha-ha before the mail spools get moved off to their own partition which is mounted no-exec.

Well I hope they aren't laughing too hard. They forgot /tmp, /var/tmp, /var/run/exim4, /var/log/exim4... and anywhere else the exim user can write to. And of course, none of that wouldn't actually prevent exploitation anyway since they are already able to execute arbitrary commands as root without creating any executable files with 'exim -C' as the exim user and ${run ...}.

Impossible to configure? No, not really, even in v3. It is actually pretty nice to use if you have a complicated configuration.

It wasn't specifically reported as a security bug 2 years ago which is probably why the fix wasn't backported to debian. Someone probably went through the bug reports looking for a potential security bug that wasn't recognized as such and developed an exploit.

Are there any android phones that are actually open besides the Nessus One/S?

The tenant did the destruction

The tenant is no longer there. Is the house still standing? Yes or no?

Droid, autonomous device that empowers the user through its open architecture.

Can you tell me when they're going to follow through and actually deliver this "empowers the user" and "open architecture" stuff people keep talking about? I have a droid 2. It came with some "CityID" nagware that asks me if I want to continue using the trial version every time I hang up a phone call. It also came with Quickoffice (some office suite, I guess) which a couple weeks ago sent me some notification saying the "professional version" or whatever was on sale that day. I'd like to get rid of all these worthless apps but the phone won't let me uninstall them - the option is greyed out. I'm not feeling very empowered.

Re-read. I did not say that Mozilla shouldn't provide an automatic plugin installation method because it would be bypassed. I said it is impossible for Mozilla to _prevent_ automatic installation of plugins.