News for hackers. Stuff that matters.
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by kree10 on Tuesday September 25, 2012 @02:51PM (#4571998)
I'd take that further. Is there any good reason for anyone to run an FTP server (public or otherwise) in 2012?
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by runn1ng on Tuesday September 25, 2012 @06:17PM (#4572991)
If you want to have a shared folder that you share between people you trust, it's still the simplest solution. It's very low-level, but it works.

Yes, you can buy a cloud offering, but physical disk is still way cheaper than "cloud disk". You don't have all the cloud features, but on the other hand, the data are 100% yours, on a server that you control.

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by EvanAnderson on Tuesday September 25, 2012 @06:48PM (#4573138)
I don't buy that it's "the simplest". Just about every major Linux distro ships w/ SFTP enabled out-of-the-box. How is installing an FTP server easier than just using the built-in SFTP server?

I've been trying to actively discourage the use of FTP for the last 10+ years. It's not an option because it passes passwords in-the-clear. Protocols that pass cleartext authentication should just be off the table today.

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by jlgreco on Wednesday September 26, 2012 @01:54AM (#4574342)
I find that positive attitudes towards FTP often seem to correlate with positive feelings towards Telnet, and both seem to correlate with "Not really that comfortable with Nix"*.

The number of times I have had to correct tech-ish friends when they talk about "telnet-ing" into servers is frightening. All of them were relatively technology literate but either didn't do it for a living or got into doing it for a living "by accident". Think your physics major buddy who has only ever used windows on any computer that he owns.

You put people like that in the position to make a call, and I assure you you'll have an FTP server running somewhere in 5 minutes flat.

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by geofft on Wednesday September 26, 2012 @03:06AM (#4574502)
I believe that random Windows authoring software is vaguely more likely to have FTP built in than SFTP. (But finding good SFTP software for Windows, e.g. WinSCP, is not hard, so this is not much of an argument.)

It's also the case that SFTP requires giving someone an actual user account on your UNIX box, and preferably knowing enough about how to set SSH up to restrict them to SFTP access only. If your server is much more valuable than the data and you don't trust yourself not to get SSH configuration subtly wrong, it's not terribly unreasonable to prefer installing an FTP server to adding a local user and giving someone else a password to it.

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by runn1ng on Wednesday September 26, 2012 @11:27AM (#4576104)
oh sure, SFTP is better, I thought we are comparing FTP/SFTP to DropBox and the like
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by stusmall on Tuesday September 25, 2012 @06:33PM (#4573070)
I usually have an internal TFTP server set up and laying around somewhere. A lot of embedded devices provide simple support for updating their firmware over TFTP.
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by JoeAltmaier on Wednesday September 26, 2012 @11:33AM (#4576135)
Engineers and scientists have large datasets to share. Gigabytes. Terabytes. FTP can handle it.
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by jimhefferon on Tuesday September 25, 2012 @02:57PM (#4572025)
How do you dir on http?
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by pserwylo on Tuesday September 25, 2012 @05:41PM (#4572835)
WebDAV [0]

If Microsoft every had of built a decent client into Windows Explorer like MacOSX has (rather than the crufty, half baked one they ran with) then it could have been great. As it turns out, it is only really easy to access it through FTP-like programs (separate from Windows Explorer).

Having said that, we had pretty good experiences with WebDrive [1] allowing us to mount WebDAV directories in Windows. Also, Gnome does a pretty good job on Linux with GVFS [2].

[0] https://en.wikipedia.org/wiki/Webdav [1] http://www.webdrive.com/products/webdrive/index.html [2] https://en.wikipedia.org/wiki/GVFS

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by astrodust on Tuesday September 25, 2012 @03:24PM (#4572169)
If this is your problem, FTP is not your answer.
Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by geofft on Wednesday September 26, 2012 @03:07AM (#4574505)
Which makes me wonder why approximately everyone has a parser for the common FTP directory listing formats, but I'm not sure I've seen any HTTP client that parses Apache mod_autoindex output or the other big servers' equivalents.