Re: SSH or Telnet?

From: Chris BeHanna (behanna@zbzoom.net)
Date: 03/30/02 

Date: Fri, 29 Mar 2002 22:04:43 -0500 (EST)
From: Chris BeHanna <behanna@zbzoom.net>
To: FreeBSD Security <security@freebsd.org>

On Fri, 29 Mar 2002 ark@eltex.ru wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
>
> What's wrong with telnet? I use it frequently and i am pretty satisified with
> it.
>
> (I don't need to encrypt sessions, there is no sensitive information inside.
> Don't tell me about cleartext passwords, there are no cleartext passwords.

    Have a look at ethereal or dsniff. You will be surprised.

> And if you really need encryption you may run telnet over ipsec)

    IPsec is a VPN solution. If someone in the LAN to which you're
VPN-ing is running a sniffer, then what? 

-- 
Chris BeHanna
Software Engineer                   (Remove "bogus" before responding.)
behanna@bogus.zbzoom.net
I was raised by a pack of wild corn dogs.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: SSH or Telnet?
    ... (I don't need to encrypt sessions, there is no sensitive information inside. ... Don't tell me about cleartext passwords, ... And if you really need encryption you may run telnet over ipsec) ...
    (FreeBSD-Security)
  • Re: SSH or Telnet?
    ... Consider this, you log in to your home PC, and get a prompt like this: ... Now you telnet to a remote machine, log in with your clear text password, ... >> (I don't need to encrypt sessions, there is no sensitive information inside. ... >> Don't tell me about cleartext passwords, ...
    (FreeBSD-Security)
  • Re: SSH or Telnet?
    ... BTW kerberized telnet does encrypt session too. ... > Consider this, you log in to your home PC, and get a prompt like this: ... >>> Don't tell me about cleartext passwords, ...
    (FreeBSD-Security)
  • Re: SSH or Telnet?
    ... >> (I don't need to encrypt sessions, there is no sensitive information inside. ... >> Don't tell me about cleartext passwords, ... > Have a look at ethereal or dsniff. ... >> And if you really need encryption you may run telnet over ipsec) ...
    (FreeBSD-Security)
  • Re: National Security Backdoor in telnetd - all versions.
    ... >> I mean with SSH and all. ... Not every system (or piece of network equipment) you want to connect to will ... It's much more likely to have a Telnet daemon. ... pickup your cleartext passwords as they are routed across the internet to your ...
    (comp.security.unix)