nanog mailing list archives

Re: telnet vs ssh on Core equipment , looking for reasons why ?


From: "Stephen J. Wilcox" <steve () opaltelecom co uk>
Date: Tue, 31 Jul 2001 15:20:46 +0100 (BST)


*ponder*

But who said I am not on your network ?  What if I penetrated your AAA
server, or, some other server on your network ?

well your not. and if you were, i'm pretty well screwed! altho having said
that, my network doesnt allow you to hop between machines.. but maybe you
compromised my security? okay, i'm screwed again!


And what about those that administer their networks from remote locations
?

see other response.. either they are on a trusted network or they have
their machines open to login from the entire internet? if the latter then
they deserve hacking!

Steve


--Ariel

how will that work, you're not on my network and my routers wont forward
local packets to you?

Steve

On Tue, 31 Jul 2001, Ariel Biener wrote:

On Tue, 31 Jul 2001, Stephen J. Wilcox wrote:

paranoia on people sniffing tho!

Hmmm, how about I inject an arp entry into your workstation, and redirect
your traffic to where I want ?

...

--Ariel

Steve

On Tue, 31 Jul 2001, fingers wrote:


Hi

    Hello All ,I have charged myself with trying to find a statistic
    on how many individuals responsible for IP core equipment
    recommend telnet or ssh & why particularly .I will summarize .

telnet is cleartext, that should be reason enough...

--Rob



--
Stephen J. Wilcox
IP Services Manager, Opal Telecom
http://www.opaltelecom.co.uk/
Tel: 0161 222 2000
Fax: 0161 222 2008


--
Ariel Biener
e-mail: ariel () post tau ac il
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html




--
Ariel Biener
e-mail: ariel () post tau ac il
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html




Current thread: