Re: [freebsd-questions] [freebsd-questions] root login with telnetd

2007-03-11 Thread Howard Jones

Wojciech Puchar wrote:
so generalizing that telnet and rsh is bad is as stupid as telling 
that oxygen is bad as it makes fires.
Well, that's true, but if you have the choice, there are better choices. 
You *can* hammer in nails with the butt of a gun, but there's a chance 
you'll somehow shoot yourself in the arm. A hammer doesn't have that risk.


There have been *many* problems over the years with rsh and telnet. 
rsh's security model comes from a time when people thought computers 
would never lie to each other. SSH does allow you to give only enough 
access, with the side-benefits (in your case) of compression and 
encryption. Even if you used ssh without those, the key-based 
authentication is still safer, and the code more modern and securely 
designed.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [freebsd-questions] [freebsd-questions] root login with telnetd

2007-03-11 Thread Wojciech Puchar
There have been *many* problems over the years with rsh and telnet. rsh's 
security model comes from a time when people thought computers would never


exactly true. so i use rsh between MY machines and rsh and telnet when 
sniffing is not a problem.


wasn't easier just to answer the question?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [freebsd-questions] [freebsd-questions] root login with telnetd

2007-03-11 Thread Christian Walther

On 11/03/07, Wojciech Puchar [EMAIL PROTECTED] wrote:

 There have been *many* problems over the years with rsh and telnet. rsh's
 security model comes from a time when people thought computers would never

exactly true. so i use rsh between MY machines and rsh and telnet when
sniffing is not a problem.

wasn't easier just to answer the question?


Well, no offense ment, but there are many people posting questions to
this list, and some of them aren't aware of potential security
problems of actions they want to perform.
So generally if a question with a potential harmfull consequence is
asked people are told of these fact, because noone here on this list
can guess if it is known, or not.

Wouldn't it have been easier for you to tell people on this list that
you are aware of the problems? I mean, instead of getting rude?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]