Re: Questions on secure remote access to Fedora Core 2



C. J. Clegg wrote:

Anyway I am unclear on just what it is that makes ssh more secure than,
say, telnet.

Telnet sends passwords and data in clear text, so anyone that can see the
packets (using a sniffer) as they are transmitted over the network, can get
the password and the data. With ssh, both the password and the data are
encrypted, so neither can be read using a sniffer. If you do nothing else,
switching from telnet to ssh, ssh will secure your data and password as
they transverse an insecure net. That said, there is, as you say below,
other issues...

If I set up sshd and someone has an ssh client on their
computer, and they know a valid userID and password on my machine, then
they're in just as easily with ssh as with telnet, near as I can see.

Unless you use "keys" with passphrases.

http://www.securityfocus.com/infocus/1810

.



Relevant Pages

  • RE: Commentary on the seven words
    ... When I was an operating systems programmer we all too often forgot that the Operating system existed to support the application, not the other way around. ... A Because the application that we run uses a telnet client that doesn't support ssh - and that's why I can't run ssh on this system. ... I administrate one system that has 128 clients on it and it's ...
    (RedHat)
  • Re: Commentary on the seven words
    ... A Because the application that we run uses a telnet client that doesn't ... support ssh - and that's why I can't run ssh on this system. ... General Red Hat Linux discussion list ... >operating system and utility advice and assistance and there are SEVEN ...
    (RedHat)
  • Re: Commentary on the seven words
    ... routinely asked to help with enabling rsh and telnet. ... Shoot, I use SSH & all that, but if I wanted to allow it for some ... > I wrote in with a complaint that Linux will allow a process (like Tar, ... I administrate one system that has 128 clients ...
    (RedHat)
  • Re: OSR507: xm_vtcld : could not open libXm.so
    ... laptop, I can run successfully "scoadmin software" if I'm through SSH, ... LINUXLAPTOP $ telnet 172.xxx.101.66 ... Similarly cron jobs have a different environment, and cgi-bin scripts ...
    (comp.unix.sco.misc)
  • Re: SSH newbie question
    ... I had to enable SSH on one alpha in order to be able to "telnet" to my ... I didn't have to configure the mac on the VMS host and vice versa. ... Unless you take steps to block connections to it (via firewall rules, ...
    (comp.os.vms)