NixOS/nixos — pull request #40 by falsifian (2012-10-10 06:25:40+00:00)
Title: Change the default value of programs.ssh.forwardX11 to false.

Forwarding X11 to untrusted servers is extremely insecure; see for example
http://www.hackinglinuxexposed.com/articles/20040705.html