[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: FAQ splinters



On Sat, 2004-09-25 at 16:26 +0200, Espen Myrland wrote:
>
> ssh root@localhost
> passwd:

This is fine if you are physically at the server, but if you are logged
in from a thin client to LTSP, your password typing will go over the
network in clear-text, since the X11 connection between the server and
the terminal client's X server is not encrypted.  Only if the terminal
is actually running locally on the thin client, rather than projected
onto it but running on the server, will your typing be secured by ssh.

I suppose that for a small school with a closed network where there are
for certain no untrusted computers on the network, this isn't really an
issue.  In most cases there's probably not really anybody sniffing the
network to capture passwords like that...  but you should be aware of
the possibility, and keep it in mind for the times when it does matter
and might be happening.

> xemacs  &

eXtended Emacs Makes A Computer Special.  :-)

-- 
    Karl Hegbloom
(o_  mailto:hegbloom@pdx.edu
//\   jabber:karlheg@jabber.org
V_/_   yahoo:karlheg




Reply to: