full-disclosure - Re: Re: open telnet port

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: list at nolog.org (list@...og.org)
Subject: Re: Re: open telnet port

Hello,

Kim B. Nielsen wrote:
> A reasonable use for telnet is when the ssh deamon goes down, or isn't 
> started on bootup because of some configuration error...

if one can't configure sshd properly to start at bootup, there are - at 
least sometimes - other possibilities than using telnet (console via a 
terminal server to which you connect via ssh if you are not sitting in 
front of the machine that won't start as expected) to eliminate such a, 
eh, mistake.

If there is no other way than telnet, I would ask myself if there's 
something (missing knowledge? not enough time to work as accurate as 
needed? management decisions? too much alcohol last evening?) going wrong...

> Yes, I know it isn't secure, but sometimes it can be the last resort...

I don't have to decide this for you... ;)

GTi
P.S.: Please don't cc me, I'm on the list. TIA.