Re: Re: Re: how to access machine using telnet

On 8/30/06, Felipe Alfaro Solana <felipe.alfaro@xxxxxxxxx> wrote:
In my case (some time ago) I was dealing with a headless server I was
set up on the other side of the world. (I live in Japan - server was
in Canada) I wanted telnetd to be running, but not used except as a
backup way to get in if sshd failed to work. (Which had happened once
after changing the config file.) The insecurity of telnet is that
everything is sent in the clear and passwords could be 'sniffed' on
the local network. As a backup service there would be nothing to sniff
unless I couldn't get in via ssh.

Or somebody tried running a password cracking program against your
telnet server. If you want a backup in case sshd goes mad, better get
access to the machine using an out-of-band mechanism, like a serial
line connected to a modem.
Is not the probability of get hacked the same on the SSH or on the
Telnet if somebody use a Dictionary attack, or any other method?
I think that the only difference is that on SSH the password goes
encripted and on Telnet it goes in plain text.
But if there is no sniffer outthere, the probability to have your
password broken is the same on Telnet or in SSH.
If I am wrong please explain me.
regards,
Guillermo.

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Relevant Pages

  • RE: Commentary on the seven words
    ... When I was an operating systems programmer we all too often forgot that the Operating system existed to support the application, not the other way around. ... A Because the application that we run uses a telnet client that doesn't support ssh - and that's why I can't run ssh on this system. ... I administrate one system that has 128 clients on it and it's ...
    (RedHat)
  • Re: Commentary on the seven words
    ... A Because the application that we run uses a telnet client that doesn't ... support ssh - and that's why I can't run ssh on this system. ... General Red Hat Linux discussion list ... >operating system and utility advice and assistance and there are SEVEN ...
    (RedHat)
  • Re: Moving from AP/DOS to openQM
    ... or with accuterm on a telnet connection to d3/nt; ... you're doing ssh into a campus to an ssh userid fooguy that in turn does ... The sshd server will send a packet to the user ... the connection at the server end. ...
    (comp.databases.pick)
  • Kermit is good, Telnet and FTP are not bad was Re: network sniffing question
    ... >> well actually I've been always using SSH myself and all my servers use ssh. ... >> the system as root using telnet is a bad idea. ... >> I'm just trying to convice this guy that kermit and korn shell and telnet ... secure connectivity to your Telnet server. ...
    (comp.os.linux.security)
  • Re: [Full-Disclosure] Re: Re: open telnet port
    ... I don't have a backup user called test. ... that keeping another way (than ssh) into the server ... could be a valid argument for keeping a telnet running. ...
    (Full-Disclosure)