Securing all remote connections

I have been relying heavily on the insecure File Transfer Protocol (FTP) for some time. But having been intercepted and watching my websites and computers being compromised again and again have finally got to me. I am now going the much more secure way of using Secure Shells (SSH).

The FTProblem

FTP transmits authentication data using nothing but plain text. It also transfers the data it self without even attempting to protect it. It is an easy prey for any malicious cracker.

It is not that I am careless with my passwords or anything. But I have fallen victim to having my data streams being intercepted no less then eight times in two years!

Secure Shells

SSH is based on the same principles as Pretty Good Privacy (PGP). It encrypts the authentication data and file stream using a public–private key encryption mechanism. Booring details aside, SSH really makes an effort where FTP just falls over and surrenders to anyone who wants to have a go with it.

Being so used to graphical user interfaces, it is hard to work with the command line tools provided by openssh. However security has to come first. I have experienced that first hand. It is much better dealing with the slight inconvenience of using the command line than the enormous inconvenience of cleaning up a system after a cracker.

Securing the rest

I am already using Secure Socket Layer (SSL) (along with PGP encryption) to secure my instant messaging and email communications. I assume those ways of communication still are as secure as I can possibly get them.

The only gaping wholes left are social networks and my web hosts web based managing interface. The latter which transmits my authentication data over an insecure connection. I hope to have dealt with that one within new year. Social networks is a whole other realm….

Copyright © 2007 Daniel Aleksandersen 2007-12-21 at 09:12

« A Tiny Tiny problem | Home | Blogging is killing the article »

Leave your comment




Related entries Stay informed

Get a free subscription to new entries in the Open Source Notebook!

News feed icon Navigation

Runbox Runbox logo
  • 10 GB email storage,
  • 1 GB file storage,
  • 100 MB attachment limit,
  • your own domain,

...and more! Get your own premium email for just 49 USD per year!

Categories Archives

The archive keeps a record of all entries that have ever been published! Have a look back in time, and see what was going on!

License

This blog entry text is licensed under a Creative Commons Sampling Plus 1.0 License. The license explained, and legal notes.

Creative Commons Sampling+


Copyright © 2006–2008 Daniel Aleksandersen | Legal, license and trademarks | Privacy policy