Re: Question/request concerning master

[Amos Shapira <amos@butch.gezernet.co.il>]

Dale Scheetz <dwarf@polaris.net> wrote:
|I suspect the error message of being a "fall through". I just tried the
|same route and was rejected. In the past this has been because someone has
|disabled ftp on master, and it usually clears up soon. You should still be
|able to telnet into master and then ftp from your site to master.

I might be missing something here, but after being beaten by crackers
who simply put a password sniffer on one of my Debian machines, I'd
strongly recommand the Debian leaders to reconsider the policy of
plain ftp and telnet.  In the least you should consider using
SSLtelnet and SSLftp, if you insist on an alternative for ssh.  I'd
also like to recommand that all passwords on master shall be replaced
if and when you disable plain ftp and telnet.

With plain passwords allowed to fly in the direction of master, ssh is
useless, as one can simply find the password from other sources and
use it to login.

Thanks,

--Amos

--Amos Shapira                    | "Of course Australia was marked for
133 Shlomo Ben-Yosef st.          |  glory, for its people had been chosen
Jerusalem 93 805                  |  by the finest judges in England."
ISRAEL        amos@gezernet.co.il |                     -- Anonymous


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .