News for hackers. Stuff that matters.
Re:The Minecraft Generation by danielvf on Thursday April 14, 2016 @05:19PM (#11500434)
This is a good article.

I couldn't help but laugh though: "telnet, a command-­line tool often used by professionals to manage servers."

Re:The Minecraft Generation by Terr_ on Friday April 15, 2016 @02:31PM (#11506555)
Working in a startup circa 2008, we had a trial-run hire who apparently had some old experience and was trying to get back into things... He was confused why he couldn't telnet anywhere, and I had to explain what SSH was and why nobody used telnet anymore.
Re:The Minecraft Generation by peeky on Friday April 15, 2016 @02:42PM (#11506629)
I interview people like this all the time. I'm long enough in the tooth to have been using telnet regularly, and it terrifies me that so many people doing what I was doing 20 years ago have found a path to obsolescence in an industry with such a critical skills shortage.
Re:The Minecraft Generation by Jtsummers on Friday April 15, 2016 @03:35PM (#11507021)
This bothers me. How are people interviewing for (presumably) admin positions without this knowledge?

When I interviewed for my first real job they included a programming "test". It was basic C stuffs (really, more C pointer focused). Things like 4 swap functions, each incorrectly implemented, what are the resulting values of a and b after running swap(a,b) or swap(&a,&b), etc.

Apparently, I found out after getting hired on, I was the only one to have ever gotten every question correct (note: I was not their only hire, the code there made sense once I heard this, I'm not there anymore). So I guess I shouldn't be surprised that sys admin jobs see similar problems. But it still really bothers me for some reason. This is fairly basic knowledge (telnet/ssh for admins, C and pointers for embedded systems programmers).

Re:The Minecraft Generation by dsp1234 on Friday April 15, 2016 @04:33PM (#11507417)
How are people interviewing for (presumably) admin positions without this knowledge?

Because once you've logged in to the box, administration via telnet and SSH is exactly the same. It's not that they don't have admin skills, they just don't have updated security skills.

It's not awesome, but if the interviewer doesn't think to ask about SSH skills, and the interviewee doesn't realize their skill is out of date, it's easy to miss.

How often is the focus on what to do once logged in, as compared to how to log in in the first place?

Re:The Minecraft Generation by jameshart on Friday April 15, 2016 @05:04PM (#11507611)
It's sad that it's so expensive to retrain someone used to telnet for ssh.
Re:The Minecraft Generation by dsp1234 on Monday April 18, 2016 @01:41PM (#11521723)
Not sure if this is sarcasm or not. But I would specifically say it's not that hard to show someone a different way of logging in, which is why I find the other reactions of shock so weird. I work with one system where I log in via two bastion hosts to a network where there is no direct network access to any host except via load balancers for applications and the bastion host itself. From the bastion host, I SSH to the individual systems on virtual machine network, but I could just as easily use telnet with basically no loss of security since the traffic never leaves the host, and doesn't even hit the network card.
Re:The Minecraft Generation by CaptSpify on Friday April 15, 2016 @05:30PM (#11507766)
Sadly telnet is still in use in some places. As of ~4 years ago, I was using it on medical devices!
Re:The Minecraft Generation by nfd on Friday April 15, 2016 @07:17PM (#11508339)
That's horrifying.
Re:The Minecraft Generation by sirtaj on Saturday April 16, 2016 @05:11AM (#11509905)
I use it to control my Marantz audio receiver.
Re:The Minecraft Generation by wtbob on Thursday April 14, 2016 @10:26PM (#11501668)
Yeah, that one got me too. I really hope these servers just call them telnet admins and don't actually use telnet in 2016.
Re:The Minecraft Generation by _asummers on Friday April 15, 2016 @02:26PM (#11506526)
I dunno man, the amount of people who say "FTP server" with a straight face, not realizing that credentials are transmitted in plaintext, is alarming.
Re:The Minecraft Generation by kefka on Friday April 15, 2016 @03:11PM (#11506858)
An FTP server is perfectly fine for anonymous logins, assuming it was configured server side to be running as a low permissioned user.

But yes, once you start taking user credentials, you need to move to something like FTPS or SFTP (urgh... double standards).

Re:The Minecraft Generation by jenscow on Friday April 15, 2016 @04:56PM (#11507564)
But authentication goes both ways.
Re:The Minecraft Generation by sdenton4 on Friday April 15, 2016 @02:45PM (#11506654)
Yeah, I generally give people the benefit of the doubt on that one, given that the new way is sftp... FTP is still a reasonable shorthand.
Re:The Minecraft Generation by badloginagain on Friday April 15, 2016 @04:02PM (#11507215)
It doesn't help that you have either FTPS or SFTP depending on the platform. I call it FTP as a generalization, but if I ever saw it as an actual FTP implementation I'm outta there.
Re:The Minecraft Generation by unclebucknasty on Friday April 15, 2016 @06:38PM (#11508124)
Yeah, but e-mail. The overwhelming masses of people still use it for transmitting the most important docs in plaintext.
Re:The Minecraft Generation by jameshart on Friday April 15, 2016 @06:43PM (#11508155)
And people still call TLS SSL. Habits form, technologies change.
Re:The Minecraft Generation by txru on Friday April 15, 2016 @10:13PM (#11508971)
From the way the article describes the Minecraft community development, I thought it was possible that the choice of telnet was deliberate. It's easier to log in to, for one- no key configuration. And while the connection is insecure, I would bet a lot that nothing of value can be accessed from the people actually telnetting in- I bet that all non-game related write permissions are limited to SSH users. And if they are hacked, then they are (probably) inconvenienced, think about their passwords, and really understand why people use this thing SSH instead of telnet.

It seems pretty genius to me.