On Thu, Sep 03, 2009 at 09:01:56AM +0200, Wojtek wrote:
> isn't nc a little bit unsecure? The $RBFILE is in plain-text.
> We use SSH for such situations, 
...snip...
> So if You want to shutdown a group of TCs and you want to keep your 
> security level high maybe the dsh is the solution.

well, thing is, running sshd from the thin clients is insecure:

you either have:

1) a shared publicly accessible sshd key on the thin-clients root filesystem
(NFS or NBD).

2) you randomly generate host keys on boot of the thin client, at which point
you have no way of knowing from the server that you're actually connecting to
the thin client.

granted, setting up a genuine man-in-the-middle attack is harder that simply
sniffing the wire, but it's dangerous to call it a secure connection. have no
such illusions.

live well,
  vagrant

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to