Re: ssh and subsequent telnet, encrypted?

From: Richard E. Silverman (res_at_qoxp.net)
Date: 04/28/05

  • Next message: Peter Petersen: "Re: ssh and subsequent telnet, encrypted?" 
    Date: 28 Apr 2005 11:43:14 -0400

    >>>>> "PP" == Peter Petersen <ppetersen@despammed.com> writes:

        PP> So to users sad about not being able to reach machine B from home
        PP> the admin gave this advice: "Just connect from home via ssh to
        PP> machine A. From there, use telnet to machine B. There is no
        PP> sniffing or other security risk, everything will still be
        PP> encrypted, because it is all embedded in your ssh connection."

    As you say, this is false. The input/output to telnet is protected while
    passing from home to A -- but it is *not* protected while passing from A
    to B. Just because both the SSH and telnet data appear together on the
    same screen at home does not mean they are both equally secure. People
    often make this mistake. 

    -- 
  Richard Silverman
  res@qoxp.net
  • Next message: Peter Petersen: "Re: ssh and subsequent telnet, encrypted?"

    Relevant Pages

    • Re: telnetd for fedora 6, i868
      ... fashioned (security risk) telnet. ... I'm sure some person will tell me about the dangers of telnet and all ... terminal servers, and old, insecure telnet is the only option. ... i looked over several pages of google and google linux results. ...
      (comp.os.linux.misc)
    • Re: telnetd for fedora 6, i868
      ... that will run on under Fedora 6 as 686 code. ... fashioned (security risk) telnet. ... Telnet runs as fast as the netowork: No pont in tuning it beyond that anyway. ... terminal servers, and old, insecure telnet is the only option. ...
      (comp.os.linux.misc)
    • Re: Telnet to open ports
      ... >Is it a security risk to be able to telnet to ... off your web services, you may need to accept a certain level of risk. ... Assuming you don't have a Telnet server running, ... telnet to ports you aren't using, ...
      (comp.os.ms-windows.nt.admin.security)
    • Re: Telnet to open ports
      ... >Is it a security risk to be able to telnet to ... off your web services, you may need to accept a certain level of risk. ... Assuming you don't have a Telnet server running, ... telnet to ports you aren't using, ...
      (comp.os.ms-windows.nt.admin.security)
    • Re: where can i telnet or do insecure http form?
      ... sent over telnet, an insecure http form. ... > Try telnetting to port 25 of a mailserver and sniffing that, ...
      (alt.computer.security)