Re: telnetd vulnerability from BUGTRAQ
On Sun, 2004-09-26 at 18:58 -0600, s. keeling wrote:
> No-one should have to apologise for warning against bad security
> practices. $DEITY knows the Windows crowd doesn't care about it, but
> we're better than that, right? One unpatched Microsh*t box in your
> LAN, and one nitwit using IE, and your whole network is owned. It
> would be irresponsible not to warn others about it.
>
> If/when they get in, they can also get a sniffer in. If you're
> running telnet, you're fooling yourself. If you're using ssh
> ubiquitously, that's yet another vector closed to them.
>
> I don't have a lot of patience for those who think, "Yes, we know the
> risks, but we'd rather not change." Evolution in action, indeed.
This kind of attitude is not very productive. Some people still need
telnet. So it should be patched, otherwise it should be removed from the
archive. End of discussion.
--
David Stanaway <david@stanaway.net>
Reply to: