Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 May 1998 08:35:56 -0400 (EDT)
From:      Andrew Short <Ashort@concentric.net>
To:        chas <panda@peace.com.my>
Cc:        Evren Yurtesen <yurtesen@ispro.net.tr>, Giap Vu <giqu@hotmail.com>, freebsd-questions@FreeBSD.ORG
Subject:   Re: Root user can't login
Message-ID:  <Pine.SUN.3.96.980513083435.22412C-100000@voyager.cris.com>
In-Reply-To: <3.0.32.19980513185846.00939a10@peace.com.my>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 13 May 1998, chas wrote:

If the packets aren't encrypted, yes.  But in a telnet session, each
keystroke generates 4 packets: the keystroke sent to the host, the echo
back to the session, and the two ack's.  If the sniffer KNOWS that you are
entering a password, then you are pretty much sunk.  

> >it does not accept you to telnet to a machine and use root account
> >because of some security problems (probably sniffers)
> 
> This is something I used to wonder about before
> we moved to ssh. If I telnet in as some user and 
> then su to root, and if there's a sniffer, isn't 
> he going to get both passwords anyway ?

-----------------------------------------------------------------------
Andrew Short                                            Colossians 3:23
ashort@concentric.net                http://www.concentric.net/~ashort/
-----------------------------------------------------------------------



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SUN.3.96.980513083435.22412C-100000>