Skip to Content.
Sympa Menu

baslinux - Re: [BL] HTTPD

baslinux AT lists.ibiblio.org

Subject: Baslinux mailing list

List archive

Chronological Thread  
  • From: sindi keesan <keesan AT sdf.lonestar.org>
  • To: baslinux AT lists.ibiblio.org
  • Subject: Re: [BL] HTTPD
  • Date: Thu, 17 Mar 2005 03:07:30 +0000 (UTC)

On Wed, 16 Mar 2005, David Moberg wrote:

----- Original Message -----
From: "Stephen Clement" <s.clement AT sympatico.ca>

Why then is it considered unsafe to go online with Kermit in
linux as root and I am supposed to do it as user?

(I don't have any experience with kermit, so i can't answer this one)

It's more for protection from bugs in kermit that could result in data
loss, than someone else on the "network".

What kind of data loss? I have never known a less buggy program than kermit. Xvesa seems like a much greater threat to data since I lose my cursor and my half-typed mails.

What is the probability of someone else breaking into my computer
even if I am doing everything wrong (running telnetd and httpd,
going online as root, using telnet not ssh, etc.) when I am dialed
into the internet with BL3 or BL2?


If you're dialed in for a minute or so, very small. If you stay connected
for a year, very high.


How about for 2 hours?

I really wouldn't recommend it. Really wouldn't.

Go on for 2 hours every day for a week, and I can almost guarantee that
someone
will have at least tested how secure your system is, if not tried to abuse it.

I have only been on once with in.telnetd and won't do it again unless I am using as server something with no hard drive - or should the client also have no hard drive? How about as client a laptop 386 in DOS that does have a hard drive, connected as dumb terminal via a terminal program?
Would someone be able to get through the RAMDISK BL on the server (running telnetd) to mess up my DOS hard drive on the 386? And as server another laptop running linux from ramdisk?

A safer solution is obviously to write email for my partner while I am online (I can spell better, too) and do his web searches for him.

David




Archive powered by MHonArc 2.6.24.

Top of Page