TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [TCLUG:5612] running commands remotely



On Wed, 28 Apr 1999, Bob Tanner wrote:

> First, remove telnet. Clear-text username and passwords are a curse to all
> admins and the script kiddies love it. Get ssh from ftp.replay.com.

Agreed. Telnet == bad. Try to avoid it at all costs....It's kind of like
emailing people your credit card number...

Make sure you get ssh2 as well. While ssh is more secure than telnet, it
does have a buffer overflow that can be exploited. This is appearently how
rootshell.com was cracked. The only downside to ssh2 is that it is not
backwards compatible with ssh1...So, get ssh1, install it, then get ssh2
and install it as well. If you try to connect to a host using ssh2, and
the host doesn't support it, your machine will default to ssh1.

> More advance use of ssh:
> 
> % ssh hostname.domain.com command

Also, scp, which lets you copy files from one computer to another
securely...

$ scp file fran0382@garnet.tc.umn.edu: 

Copies file to fran0382's home directory.

$ scp fran0382@garnet.tc.umn.edu:file .

Copies file from fran0382's home directory to the current directory...

Luke