From owner-freebsd-security Sat Aug 18 11:59:27 2001 Delivered-To: freebsd-security@freebsd.org Received: from cithaeron.argolis.org (bgm-24-169-175-136.stny.rr.com [24.169.175.136]) by hub.freebsd.org (Postfix) with ESMTP id 1F28D37B40B for ; Sat, 18 Aug 2001 11:59:24 -0700 (PDT) (envelope-from piechota@argolis.org) Received: from localhost (piechota@localhost) by cithaeron.argolis.org (8.11.4/8.11.4) with ESMTP id f7IIx8U11112; Sat, 18 Aug 2001 14:59:08 -0400 (EDT) (envelope-from piechota@argolis.org) X-Authentication-Warning: cithaeron.argolis.org: piechota owned process doing -bs Date: Sat, 18 Aug 2001 14:59:08 -0400 (EDT) From: Matt Piechota To: Mikhail Kruk Cc: Laurence Berland , "Carroll, D. (Danny)" , Subject: RE: Silly crackers... NT is for kids... In-Reply-To: Message-ID: <20010818145557.H4969-100000@cithaeron.argolis.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 18 Aug 2001, Mikhail Kruk wrote: > And finally setup your telnetd so that it will print a message saying > "telnet is insecure. please use ssh" etc. It will display this message, > sleep for 60 seconds and then run normal telnetd. Most people will just > sit there and wait for 60 seconds, then use telnet. After one or two month > of this torture disable telnetd for good (keep the message, but don't run > telnetd). People will download ssh and think "Thank God, I don't have to > wait for 60 seconds now! I love that SSH thing!" > That's what our sysadmin did (shell server used by some 4000 undergrads) > and it worked. While not a bad idea in the .edu universe, if I tried to pull that on our development servers, I'd have a torrent of angry email not only from developers but their managers. Being accountable sucks. :) -- Matt Piechota Finger piechota@emailempire.com for PGP key AOL IM: cithaeron To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message