Re: network sniffing question

From: David (thunderbolt01_at_netscape.net)
Date: 04/29/03 

Date: Tue, 29 Apr 2003 05:44:29 GMT

Pat wrote:
> thanks for your answers guys.
>
> well actually I've been always using SSH myself and all my
> servers use ssh.
>
> the problem I'm having is to convice the "senior sysadmin"
> that loging into the system as root using telnet is a bad
> idea. I've even showed him that it's a mistake by using
> tcpdump and getting the root password but he's conviced that
> we have no use for ssh.
>
> I'm just trying to convice this guy that kermit and korn shell
> and telnet are old stuff!!

Login as root and change the root password and wait for him to
get worried that the system has been CRACKED.
Then explain to him how easy it was to "own" the system due to
the use of telnet. 

-- 
Confucius:  He who play in root, eventually kill tree.
Registered with the Linux Counter.  http://counter.li.org
Slackware 9.0 Kernel 2.4.20 i686 (GCC) 3.2.2
Uptime: 23 days, 23:24, 1 user, load average: 0.15, 0.09, 0.14

Relevant Pages

  • Re: network sniffing question
    ... well actually I've been always using SSH myself and all my servers use ssh. ... the system as root using telnet is a bad idea. ... I'm just trying to convice this guy that kermit and korn shell and telnet ... >> we have a switched network. ...
    (comp.os.linux.security)
  • RE: Linux hacked
    ... Also, what exactly did the history file show, can you paste it into a mail ... > First let me say I'm a security novice. ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
    (Security-Basics)
  • Re: Linux hacked
    ... To find out what kernel version you are running, type "uname -a" without ... > been unsuccessful in getting root back. ... > via ssh but you could su in once logged in as one of three users. ...
    (Security-Basics)
  • RE: Commentary on the seven words
    ... on root access to telnet. ... Shoot, I use SSH & all that, but if I wanted to allow it for some ... I administrate one system that has 128 clients ...
    (RedHat)
  • Re: How do I unlock a specific user for telnet?
    ... > Usually Im all for telnet when someone says in a high panicky voice "NEVER ... But as far as root goes, I must admit that you might not want ... > If you have su or sudo then you can achieve basically the same thing. ... I don't understand what some people have against ssh in general. ...
    (comp.os.linux.security)