decoration decoration
Stories

GROKLAW
When you want to know more...
decoration
For layout only
Home
Archives
Site Map
Search
About Groklaw
Awards
Legal Research
Timelines
ApplevSamsung
ApplevSamsung p.2
ArchiveExplorer
Autozone
Bilski
Cases
Cast: Lawyers
Comes v. MS
Contracts/Documents
Courts
DRM
Gordon v MS
GPL
Grokdoc
HTML How To
IPI v RH
IV v. Google
Legal Docs
Lodsys
MS Litigations
MSvB&N
News Picks
Novell v. MS
Novell-MS Deal
ODF/OOXML
OOXML Appeals
OraclevGoogle
Patents
ProjectMonterey
Psystar
Quote Database
Red Hat v SCO
Salus Book
SCEA v Hotz
SCO Appeals
SCO Bankruptcy
SCO Financials
SCO Overview
SCO v IBM
SCO v Novell
SCO:Soup2Nuts
SCOsource
Sean Daly
Software Patents
Switch to Linux
Transcripts
Unix Books

Gear

Groklaw Gear

Click here to send an email to the editor of this weblog.


You won't find me on Facebook


Donate

Donate Paypal


No Legal Advice

The information on Groklaw is not intended to constitute legal advice. While Mark is a lawyer and he has asked other lawyers and law students to contribute articles, all of these articles are offered to help educate, not to provide specific legal advice. They are not your lawyers.

Here's Groklaw's comments policy.


What's New

STORIES
No new stories

COMMENTS last 48 hrs
No new comments


Sponsors

Hosting:
hosted by ibiblio

On servers donated to ibiblio by AMD.

Webmaster
Has in place in internal nets: client sw available | 234 comments | Create New Account
Comments belong to whoever posts them. Please notify us of inappropriate comments.
FTP?
Authored by: Anonymous on Thursday, November 08 2012 @ 01:02 AM EST
Who cares? The username and password were sent using
email, and you can bet that the email was not encrypted.

[ Reply to This | Parent | # ]

FTP?
Authored by: tknarr on Thursday, November 08 2012 @ 02:55 AM EST

That depends. FTP is unencrypted, surely (although there are encrypted versions). But the main vulnerability is to network snooping/sniffing, which is something that requires either physical access to one of the terminal networks or a high degree of technical sophistication to compromise one of the transit networks and filter the traffic to get only the relevant flows. And if someone has access to one of the terminal networks, they probably don't need to snoop on traffic to get the data. At the same time, FTP's one of the few protocols that allows for authenticated upload of data (and related things like ownership and permissions at the receiving end) without needing to be a command-line user.

It's got it's problems, but for the most part it's "good enough" against anything short of a specifically-targeted attack.

[ Reply to This | Parent | # ]

Has in place in internal nets: client sw available
Authored by: macrorodent on Thursday, November 08 2012 @ 04:41 AM EST

I confess to having used and even set up FTP servers in company intranet for moving files, simply because it is the lowest common denominator. Even Windows comes with bundled FTP software, and has done so for a long time. Alternatives would requires special software to be installed, always a hurdle.

For this reason FTP is unlikely to go away anytime soon. At least not until you can convince Microsoft to bundle ssh...

[ Reply to This | Parent | # ]

Groklaw © Copyright 2003-2013 Pamela Jones.
All trademarks and copyrights on this page are owned by their respective owners.
Comments are owned by the individual posters.

PJ's articles are licensed under a Creative Commons License. ( Details )