Re: [cobalt-users] InterBase

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Peter Masloch" <peter@xxxxxxxxxxx> wrote:
> Bruce, there is a "little" difference between telnet and
> ftp. If i get ftp user access to your server, there is not
> much i can do. But if i get telnet user access to your
> server....you are done.

But if you sniff a password sent via FTP, unless telnet or SSH is disabled
or firewalled it'll be trivial to use that login via telnet or SSH.

> The admin webloging also is clear text, by the way.
> Not very secure.

Agreed.  In newer RaQ models it's trivial to run the GUI over SSL (you can
configure it to do so via the GUI) and there's always the option to tunnel
the GUI port traffic over SSH.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/