📅 Original date posted:2011-07-01
🗒️ Summary of this message: A discussion on whether to turn on UPnP by default in Bitcoin's GUI, with some in favor and others against due to security concerns.
📝 Original message:On Jul 1, 2011, at 11:35 AM, jan at uos.de wrote:
> On Fri, Jul 01, 2011 at 11:06:56AM -0400, Gavin Andresen wrote:
>>> Not sure about OS differentiation, seems...wrong? Maybe disabled by
>>> default on bitcoind but on by default on bitcoin?
>>
>> OK. I mis-remembered the poll:
>> http://forum.bitcoin.org/index.php?topic=4392.0
>>
>> On by default 8 (20%)
>> Off by default 22 (55%)
>> On by default in the GUI, off by default in bitcoind 10 (25%)
>
> I just voted as well and now - with some extra votes in the meantime -
> it's 9 / 22 / 13. So exactly 50/50 between off (22) and some form of on
> (9 + 13).
>
> I'm in favor of turning it on by default in the GUI and leaving it off
> in bitcoind.
>
> I don't like UPnP much, I find it exemplifies exactly what is wrong with
> computer security today: Convenience trumps security almost every time.
I don't think this should be a vote at all. Given Greg/Matt's numbers it is a necessity to ensure network stability over the next 90 days.
Also: the default will only apply to pre-built binaries, which bitcoind isn't one of, so for people running bitcoind this default doesn't matter at all. Just continue building without UPNP support as you're already doing.
--
Douglas Huff
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 881 bytes
Desc: This is a digitally signed message part
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20110701/945335ad/attachment.sig>;
Douglas Huff [ARCHIVE] /
npub1xp…c6eq0
2023-06-07 01:59:50
in reply to nevent1q…c4sp
Author Public Key
npub1xpryrka5nmn2vq9uum4qfjcvkfdne95l3ug4sxhdkcnndu4uu6eqrc6eq0Published at
2023-06-07 01:59:50Event JSON
{
"id": "22af30213542093d1b331157b749a91b6f7e57f6166393eb8e9e3f62e2bcb394",
"pubkey": "304641dbb49ee6a600bce6ea04cb0cb25b3c969f8f11581aedb62736f2bce6b2",
"created_at": 1686103190,
"kind": 1,
"tags": [
[
"e",
"b259aa9a612285804c8ca826465b76b8809982948e0ab24ccddc1c8a657cc6bd",
"",
"root"
],
[
"e",
"9a53aec240b2c2bb5754514f08c033860849aba740ac892feb79c5fb85af7da0",
"",
"reply"
],
[
"p",
"5ea1cbeab9d50021496bba53fd43b1c7501d58bc84cd506595942424f8dc69c3"
]
],
"content": "📅 Original date posted:2011-07-01\n🗒️ Summary of this message: A discussion on whether to turn on UPnP by default in Bitcoin's GUI, with some in favor and others against due to security concerns.\n📝 Original message:On Jul 1, 2011, at 11:35 AM, jan at uos.de wrote:\n\n\u003e On Fri, Jul 01, 2011 at 11:06:56AM -0400, Gavin Andresen wrote:\n\u003e\u003e\u003e Not sure about OS differentiation, seems...wrong? Maybe disabled by\n\u003e\u003e\u003e default on bitcoind but on by default on bitcoin?\n\u003e\u003e \n\u003e\u003e OK. I mis-remembered the poll:\n\u003e\u003e http://forum.bitcoin.org/index.php?topic=4392.0\n\u003e\u003e \n\u003e\u003e On by default\t 8 (20%)\n\u003e\u003e Off by default\t 22 (55%)\n\u003e\u003e On by default in the GUI, off by default in bitcoind\t 10 (25%)\n\u003e \n\u003e I just voted as well and now - with some extra votes in the meantime -\n\u003e it's 9 / 22 / 13. So exactly 50/50 between off (22) and some form of on\n\u003e (9 + 13).\n\u003e \n\u003e I'm in favor of turning it on by default in the GUI and leaving it off\n\u003e in bitcoind.\n\u003e \n\u003e I don't like UPnP much, I find it exemplifies exactly what is wrong with\n\u003e computer security today: Convenience trumps security almost every time.\n\nI don't think this should be a vote at all. Given Greg/Matt's numbers it is a necessity to ensure network stability over the next 90 days.\n\nAlso: the default will only apply to pre-built binaries, which bitcoind isn't one of, so for people running bitcoind this default doesn't matter at all. Just continue building without UPNP support as you're already doing.\n\n-- \nDouglas Huff\n\n\n-------------- next part --------------\nA non-text attachment was scrubbed...\nName: PGP.sig\nType: application/pgp-signature\nSize: 881 bytes\nDesc: This is a digitally signed message part\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20110701/945335ad/attachment.sig\u003e",
"sig": "bdf5122a33c2272a31d4a915c56f73553e3724834d71d679131c89980d274f062654f21d850607c7113c67b753c6a014fe87bb7f69ac342e0f4a4f566bb4ec65"
}