Re: [cobalt-users] RE: telnet vs ssh

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

At 01:17 PM 12/17/99  David B. Peterson wrote:

> It's a hell of a lot better than telnet.  And it is much better if you 
> turn off all non-encrypted authentication on the box (ftp too.) scp seems 
> to be working for me.

Tell me about scp (I really don't know everything <smile>).  My new RaQ is 
the only box I run inetd on; I'd like to turn it off, but I'm not sure what 
really requires it; I haven't looked into the bowels of the system yet; I'm 
still learning it.

> Of course it is best of you power off the machine, encase it in concrete, 
> place it in a locked room in the bowels of a nuclear waste facility.  But 
> that seems to be going a little too far.

Maybe we could talk the IRS into this kind of security <smile>?

> I try to only give it about 10 minutes a day.  Just enough to keep up with 
> exploits on the software that I use.

Yes, but then you have to do something about the exploits.  Much easier to 
just play ostrich <smile>.

Jeff