Re: ssh with no encryption ?

From: Dimitri Maziuk (dima@127.0.0.1)
Date: 02/24/03

  • Next message: Richard E. Silverman: "Re: Can't login to an OS X box using ssh"
    From: Dimitri Maziuk <dima@127.0.0.1>
    Date: Mon, 24 Feb 2003 16:57:53 +0000 (UTC)
    
    

    those who know me have no need of my name sez:
    > in comp.security.ssh i read:
    >>those who know me have no need of my name sez:
    >>> in comp.security.ssh i read:
    >
    >>>>We use CVS for web/ftp site mirroring and we use SSH to tunnel CVS
    >>>>connections.
    >>...
    >>> i'm surprised by that, rsync should do as well as ftp.
    >>
    >>FTP has no way of finding only files that changed since last
    >>checkout.
    >
    > incorrect. you are too used to trivial ftp clients, get a better one.
    >

    Get a clue. I assume you are referring to MDTM command; that
    must be implemented on the server, not client.

    >>Rsync could do, with a bit of scripting, but the
    >>updates are already in CVS;
    >
    > incorrect. the mtime of the file will have changed.
    >

    Get a clue. Timestamp-based comparison requires that clocks on
    client and server are synchronized. I have no control over clients,
    so I can't guarantee that.

    >>all I need to do is open remote CVS access to selected users without using
    >>pserver and without their usernames/passwords floating around in the
    >>clear.
    >
    > i realize you would like cipher=none. well, too bad, it doesn't exist.
    > revert to an ancient version of ssh if you feel so strongly about it, or
    > hack it in yourself, or calm down and take a harder look at my suggestions.
    >
    >>... kerberos, srp or ssl enabled ftp server and client
    >>> with data encryption disabled, or even a kerberos, srp or ssl enabled telnet
    >>> server and client (again with encryption disabled) and an in-band transfer
    >>> tool like kermit or zmodem.
    >>
    >>... running on Mac emulated by Executor inside a Cygwin Linux running
    >>on a Win'98 VM running in VMware on x86 Solaris. Sure.
    >
    > do you often find that using sarcasm results in people continuing to help
    > you, in particular to reduce your ignorance?

    I think you're confused. When I need your help to reduce my ignorance
    I'll ask for it.

    HAND
    Dima

    -- 
    The wombat is a mixture of chalk and clay used for respiration.      -- MegaHal
    


    Relevant Pages

    • Re: FTP Server setup... Im so close!
      ... > I have installed the Internet Information Services, etc, and have the FTP ... Your external client is trying to use Passive Mode. ... Since your server is behind NAT, ...
      (microsoft.public.windowsxp.network_web)
    • Re: Microsoft FTP Server problem on W2K?
      ... I have technical responsibility for this FTP implementation, ... Since PASV voids PORT, the client side ... connect to the server from" isn't implied by the text of the RFC. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Telnet/ftp problems SBS2000
      ... | through the server to get internet access everything works. ... | client uses an internet backup company to backup his really vital data, ... I understand that you cannot use ftp service to ... the connection can be established ...
      (microsoft.public.windows.server.sbs)
    • [NEWS] Directory Traversal Vulnerabilities in FTP Clients
      ... vulnerable to certain directory traversal attacks by modified FTP servers. ... file/directory permissions and the privilege level of the client. ... A malicious server could potentially overwrite key files to cause a denial ... your vendor, or the associated CERT vulnerability note, if your product is ...
      (Securiteam)
    • Re: Configure ISA to allow ISA Server to make external FTP Connect
      ... your Server name and select properties, Installation mode is listed at the ... client, as well as being all three at the same time. ... This means that the workstation has the proxy server details ... Enter the name 'FTP Access', press next twice, from the drop down box ...
      (microsoft.public.isa.configuration)