December 29, 2006, Newsletter Issue #45: Telnet is Death
Tip of the Week
If you're a sysadmin of a UNIX system that allows telnet access, then you might as well be posting your root username and password on a billboard over the next global hacker convention as you clearly have no concern for remote access security.
Telnet has long been known to be incredibly insecure as it's vulnerable to eavesdropping. You should require all clients connecting to your system to do so through only secure connections, such as SSH tunnels.
Furthermore, you should not allow remote root access even through an SSH connection. You can still perform administrative tasks remotely, but if you do so by first logging in using ssh as a normal user and then using su root, you'll be safer than simply by sshing as root.
About LifeTips
Now one of the top on-line publishers in the world, LifeTips offers tips to millions of monthly visitors. Our mission mission is to make your life smarter, better, faster and wiser. Expert writers earn dough for what they know. And exclusive sponsors in each niche topic help us make-it-all happen.
| Guru Spotlight |
| Sheri Ann Richerson |
