antiEsnob, Sorry about the 'e', I honestly didn't notice.
That's fine if there are few developers. I don't recall anyone asking any developer to be a part of this discussion. This is an open forum that anyone can come and visit at any time so obviously they're welcome to participate at any time of their own free will. I'm not experienced at all with opening up "bugs" or things of that nature so I thought this was a good place to start a discussion on how to figure out the best way to get this VERY important issue fixed in Trisquel. Specifically with the installation of the Desktop Environment install. It seems like a great product with a serious flaw in its current state. What the developers do need to do, in my opinion, is fix the installation process so that users who install a Trisquel Desktop Environment don't end up with a running SSH server by DEFAULT, with NO WARNING. There is no user level interaction that should be considered acceptable because that would mean that every single Trisquel user would have to know about this issue first, and then take action on it which would hardly be considered a "fix".
I totally agree with your statement that there are things that can be improved and that this is one of them.
I mentioned the language barrier thing because you stated that the developers "don't need to be disturbed on non security issues." This IS a security issue, plain and simple, because people that install the Trisquel Desktop Environment package, and do NOT select the SSH Server option, still end up with an SSH server running on their computer.
As long as SOMETHING gets opened on this so that the Trisquel developers see it, and can act on it, then the goal of this discussion has been met. From that point on it's up to the developers to take this issue seriously, and hopefully do something about it.
I'm not sure how I could make my comments about Trisquel and Windows XP any clearer. Trisquel is a desktop operating system just like Windows XP. Can you imagine the security landscape if an SSH server was included with every installation of Windows XP, and no one knew about it? That is to say, what if the Trisquel Desktop Environment installation, in it's current state, were as popular as Windows XP? Then there would be a LOT of computers on the Internet running SSH servers without their owners even knowing that such a thing existed. I hope this clears things up.
I thank Mzee opening up an issue at https://trisquel.info/en/issues/11188 and look forward to progress being made.
