my main question is: now that I have disabled this service, is
something bad going to happen (like plug something in and it won't
Hello Tyler & all :) In summary, MiniSSDPd is optional. Either deactivating it or fully removing it, would not break anything.
The device discoveries will still work fine. But they might be slower though. If you deactivate or remove MiniSSDPd your Debian would have stronger security. So it depends on your needs.
Below is the same answer as above. But with details if you're interested in those.
Speaking for myself only. I do NOT trust MiniSSDPd. Because it has a very weak security history. Catastrophically weak security history in fact. Find the examples & sources below. I deactivated my MiniSSDPd. Because to me security is more important than speed.
The good news is that starting with Debian 10 Buster. MiniSSDPd is deactivated by default.
For those not familiar with MiniSSDPd, in summary what it does is that it speeds up device discoveries. For example, if you plug a new device on your Debian, it will be detected faster. The challenge with MiniSSDPd is that, for example, routers, printers, and other devices can be remotely commandeered by a new attack that exploits a security flaw in the Universal Plug and Play network protocol. And MiniSSDPd has a very long history of weak security.
Examples of security flaws with MiniSSDPd:
• June 2020 https://arstechnica.com/information-technology/2020/06/upnp-flaw-exposes-millions-of-network-devices-to-attacks-over-the-internet/
• October 2019 https://www.howtogeek.com/122487/htg-explains-is-upnp-a-security-risk/
• May 2019 https://www.debian.org/lts/security/2019/dla-1805.en.html
• May 2016 https://www.debian.org/lts/security/2016/dla-454.en.html
• January 2013 https://www.hdm.io/writing/SecurityFlawsUPnP.pdf