Talk:CUPS/Proposed baseline

message: ===Section: Overview===
;Ta bu shi da yu
Several clarifications should be considered when it comes to this article: 
* "CUPS provides a standard interface to allow print jobs to be sent to printers." - should we clarify what "standard interface" means?
* "Previously, it was difficult to find a solution that was standardised that would allow for the numerous printers that are on the market that use their own printer languages and formats." what were the other solutions that we are comparing against? Isn't this merely restricted to Unixes?
* "With CUPS, it is far easier for printer manufacturers and printer driver developers to create drivers that work natively on the print server." - what are we comparing against?
* "As the processing is done on the server, it is also far easier to allow for network based printing than it was previously with other Unix printing systems." The processing is done on the server for lpd, correct? Is it more accurate to say that it can filter different types of data on the server? Again, what are we comparing against? If we could clarify this it would make this text far more accurate.
====Subsection: Scheduler====
Looks accurate.
====Subsection: Filter system====
;Ta bu shi da yu
Looks accurate.
====Subsection: Backends====
;Ta bu shi da yu
Brief, but accurate.
===Section: Compatibility===
;Ta bu shi da yu
Accurate.
===Section: User Interface tools===
;Ta bu shi da yu
The overview is accurate. However, is it complete? Are these all the UI tools that can be used with CUPS?
====Subsection: KDE====
;Ta bu shi da yu
Recommend that this be reviewed for accuracy by KDE experts. Suggest contacting developers of KDE-print to review this section, also suggest sending a request for help on the KDE mailing list.
====Subection: Mandrake Linux====
;Ta bu shi da yu
Recommend that this be reviewed for accuracy by Mandrake Linux experts. Suggest sending a request for help to a Mandrake Linux mailing list. This could be expanded, may not be complete. Is the screenshot a fair representation of Mandrake's CUPS GUI offering?
====Red Hat/Fedora====
;Ta bu shi da yu
Seems complete to me. I personally use the RedHat GUI on my Fedora Core 2 machine. Fedora Core 3 has been released, so don't know if this has been changed. The Eric Raymond quote is accurate.
====ESP Print Pro====
;Ta bu shi da yu
I took this directly from ESP website. Recommend review and expansion. 
====CUPS web-based administration interface====
;Ta bu shi da yu
Accurate, but very brief. Can this be expanded?
====Vulnerabilities====
;Ta bu shi da yu
Accurate, but incomplete. See :
:During a source code audit, Chris Evans discovered a number of integer overflow bugs that affect xpdf.  CUPS contains a copy of the xpdf code used for parsing PDF files and is therefore affected by these bugs.  An attacker who has the ability to send a malicious PDF file to a printer could cause
CUPS to crash or possibly execute arbitrary code.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0888 to this issue.
:
:When set up to print to a shared printer via Samba, CUPS would authenticate with that shared printer using a username and password.  By default, the username and password used to connect to the Samba share is written into the error log file.  A local user who is able to read the error log file could collect these usernames and passwords.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0923 to this issue.
;Demi T/C
A list of vulnerabilities is likely going to all be incomplete. I'd suggest not listing them (rather where to find them), especially in a document one would consider stable.
:Good point. Maybe we could incorporat this into the text somehow? - Ta bu shi da yu 04:21, 13 Mar 2005 (UTC)
thread_title: Accuracy

message: ;Ta bu shi da yu
The overview is accurate. However, is it complete? Are these all the UI tools that can be used with CUPS?
====Subsection: KDE====
;Ta bu shi da yu
Recommend that this be reviewed for accuracy by KDE experts. Suggest contacting developers of KDE-print to review this section, also suggest sending a request for help on the KDE mailing list.
====Subection: Mandrake Linux====
;Ta bu shi da yu
Recommend that this be reviewed for accuracy by Mandrake Linux experts. Suggest sending a request for help to a Mandrake Linux mailing list. This could be expanded, may not be complete. Is the screenshot a fair representation of Mandrake's CUPS GUI offering?
====Red Hat/Fedora====
;Ta bu shi da yu
Seems complete to me. I personally use the RedHat GUI on my Fedora Core 2 machine. Fedora Core 3 has been released, so don't know if this has been changed. The Eric Raymond quote is accurate.
====ESP Print Pro====
;Ta bu shi da yu
I took this directly from ESP website. Recommend review and expansion. 
====CUPS web-based administration interface====
;Ta bu shi da yu
Accurate, but very brief. Can this be expanded?
====Vulnerabilities====
;Ta bu shi da yu
Accurate, but incomplete. See :
:During a source code audit, Chris Evans discovered a number of integer overflow bugs that affect xpdf.  CUPS contains a copy of the xpdf code used for parsing PDF files and is therefore affected by these bugs.  An attacker who has the ability to send a malicious PDF file to a printer could cause
CUPS to crash or possibly execute arbitrary code.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0888 to this issue.
:
:When set up to print to a shared printer via Samba, CUPS would authenticate with that shared printer using a username and password.  By default, the username and password used to connect to the Samba share is written into the error log file.  A local user who is able to read the error log file could collect these usernames and passwords.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0923 to this issue.
;Demi T/C
A list of vulnerabilities is likely going to all be incomplete. I'd suggest not listing them (rather where to find them), especially in a document one would consider stable.
:Good point. Maybe we could incorporat this into the text somehow? - Ta bu shi da yu 04:21, 13 Mar 2005 (UTC)
thread_title: Section: User Interface tools

message: ;Ta bu shi da yu
Accurate, but incomplete. See :
:During a source code audit, Chris Evans discovered a number of integer overflow bugs that affect xpdf.  CUPS contains a copy of the xpdf code used for parsing PDF files and is therefore affected by these bugs.  An attacker who has the ability to send a malicious PDF file to a printer could cause
CUPS to crash or possibly execute arbitrary code.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0888 to this issue.
:
:When set up to print to a shared printer via Samba, CUPS would authenticate with that shared printer using a username and password.  By default, the username and password used to connect to the Samba share is written into the error log file.  A local user who is able to read the error log file could collect these usernames and passwords.  The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0923 to this issue.
;Demi T/C
A list of vulnerabilities is likely going to all be incomplete. I'd suggest not listing them (rather where to find them), especially in a document one would consider stable.
:Good point. Maybe we could incorporat this into the text somehow? - Ta bu shi da yu 04:21, 13 Mar 2005 (UTC)
thread_title: Vulnerabilities