Re:FreeBSD deprecates all r-cmds (rcp, rlogin, etc.)
by gbrown_ on Wednesday July 05, 2017 @06:00AM
(#14701112)
> They're not exactly insecure, they're just used for different things, like networks that are already secure.
There is no such thing.
I'd be pedantic and rephrase this to - used for networks which you trust.
Re:FreeBSD deprecates all r-cmds (rcp, rlogin, etc.)
by peterwwillis on Wednesday July 05, 2017 @10:12AM
(#14702512)
I think the engineers setting up red/black networks for the military might disagree with you, but even in the enterprise 802.1X can result in a secure local network.
I would say trust is a result of the operation of the network, as you may need to do something to establish it. And in this vein you're right, "networks you already trust" definitely would have been better wording.
Re:FreeBSD deprecates all r-cmds (rcp, rlogin, etc.)
by richardwhiuk on Wednesday July 05, 2017 @11:06AM
(#14702950)
No. You can't use rlogin on a 802.1X network or a red/black network. Passwords are transmitted in plain text, which means any other terminal on the network can sniff the password.
Re:FreeBSD deprecates all r-cmds (rcp, rlogin, etc.)
by peterwwillis on Wednesday July 05, 2017 @11:36AM
(#14703232)
Red networks are intended for classified plaintext, by definition...
Re:FreeBSD deprecates all r-cmds (rcp, rlogin, etc.)
by richardwhiuk on Sunday July 16, 2017 @05:01AM
(#14781197)
Passwords aren't classified plain text, they are authentication details and should be handled differently.
Quite a few years ago I helped build the public terminal cluster for HOPE. That year we used a token ring network for all of the hosts. Nobody anywhere near the conference had any token ring gear whatsoever. It was impossible to break into the network, so you had to use existing nodes. And the nodes' adapters had their promiscuous modes disabled in hardware. That plus a hardened terminal server and an extremely limited thin client meant nobody could successfully hack the network. You could have used telnet all day and been totally secure.
Though in conference environments, the network is not the biggest risk for targeted attacks. Carefully watching your target enter their password is simpler and more effective.