From owner-freebsd-security Thu Mar 28 13:39:51 2002 Delivered-To: freebsd-security@freebsd.org Received: from mail.microbsd.net (ns1.microbsd.net [4.23.122.10]) by hub.freebsd.org (Postfix) with ESMTP id B921037B416 for ; Thu, 28 Mar 2002 13:39:46 -0800 (PST) Received: from 127.0.0.1 (localhost.microbsd.net [127.0.0.1]) by mail.microbsd.net (Postfix) with SMTP id 1BCB31F05; Thu, 28 Mar 2002 16:33:28 -0500 (EST) Received: from vaio.microbsd.net (unknown [65.162.182.48]) by mail.microbsd.net (Postfix) with ESMTP id 746431F11; Thu, 28 Mar 2002 16:33:27 -0500 (EST) Subject: Re: SSH or Telnet? From: kerberus To: Adam Cc: security@freebsd.org In-Reply-To: <000501c1d6a0$30b95bd0$126cfea9@a4ibmrrll9362k> References: <2823.213.112.58.135.1017350976.squirrel@phucking.kicks-ass.org> <000501c1d6a0$30b95bd0$126cfea9@a4ibmrrll9362k> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/1.0.2-5mdk Date: 28 Mar 2002 16:38:47 -0500 Message-Id: <1017351528.4217.64.camel@vaio.microbsd.net> Mime-Version: 1.0 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Am I actually reading this on a security list of all places ???? Are you actually suggesting the user use something that sends data over the wire such as the username, and password in clear text usable ?? Doesnt the thought of this scare you??? you telnet to remote system, someone bewtween you and remote system, say at your ISP is sniffing the wire for whatever reason, as your logging into the remote box, and guess what, now they have your access to that same box. Dont use telnet, it is very insecure, use ssh where everything is encrypted!! On Thu, 2002-03-28 at 16:33, Adam wrote: > I would highly suggest that you use telnet. As long as you keep it updated > and patched you shouldnt have any problems with it.. > > Adam > EcommIS.net > "Designing Your Future" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message