Re: telnet break-in
On Tue, 25 Aug 1998, Ossama Othman wrote:
> Bummer! It appears that it is time for you disable all of those incoming
> services we mentioned. Have you considered using Secure Shell? If you
> can't use Secure Shell, you might want to try One-Time Password packages,
> such as OPIE. I believe that even WU-FTP is starting to support one time
> passwords, too.
>
> -Ossama
Uhm, secure shell is not the answer to all problems. It WILL revert to an
unsecure protocol if the other end can not establish an encrypted session.
Also, it is still just as easy to log in with a cracked password. About
the only thing it is really great at is making sure that the other machine
really has permission for a password-less login. Still, even THIS can be
hacked if someone has gotten onto the machine in the past and snarfed a
copy of your public ssh key.
George Bonser
The Linux "We're never going out of business" sale at an FTP site near you!
Reply to: