Comment by throwawaythekey

Forgive me for being the idiot in the room but is the argument:

1. 5900 was always known to be an extra unsafe port to have open

2. all ports should be assumed unsafe without explicit vetting

I'm assuming the argument being made is (2), but it really is a sad safe of affairs because use cases from time to time do involve having ports hot.

Or should things be taken one step further to *always* use a vpn or similar?