Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of ben@reser.org designates
 50.197.89.41 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <5182FC5D.4050507@apache.org>
References: <517F96F0.3090004@ice-sa.com>
	<20130430114945.GA23155@elias>
	<5180663B.2010001@ice-sa.com>
	<20130501191547.GA12678@elias>
	<5182225C.8070401@ice-sa.com>
	<5182FC5D.4050507@apache.org>
Date: Thu, 2 May 2013 21:35:32 -0700
Message-ID: 
 <CADkdwvSvjD+pWBdWaTcV4SeXBRVd5s=fnbA+iLb64e86ihvaxg@mail.gmail.com>
Subject: Re: URL scanning by bots
From: Ben Reser <ben@reser.org>
To: dev <dev@httpd.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

On Thu, May 2, 2013 at 4:53 PM, Guenter Knauf <fuankg@apache.org> wrote:
> isnt that one of the core issues - that folks who dont know what they do run
> a webserver? And then, shouldnt these get punished with being hacked so that
> they try to learn and finally *know* what they do, and do it right next
> time? ;-)

I have to say this is a horrible attitude.  Nobody should be
advocating that a lack of knowledge should result in getting hacked.
Yes, it's the obvious result of the situation that exists today.  But
we should be striving to make things as easy for the inexperienced
user as possible.

Just the other day I saw someone saying pretty much that unless you're
an Apache httpd expert you should just use nginx.  That if you aren't
an expert then you won't have Apache configured properly and when you
get a heavy load your website will fall over.

It's just disappointing to see this attitude coming from a httpd PMC member.