Re: [cobalt-security] re: Telnet security

[Jan P Tietze <jptietze@xxxxxxxxxxx>]

Ordinary hackers (or crackers, or whatever you choose to call them) do so
routinely. You hack a box, put the interface into promiscuous mode, and set up an
account sniffer like LinSniff on that hub. If it *is* in fact a hub. In case of a
switched port, you would just see those login attempts originating from or going
to the hacked box... which is just as bad if you roam between different machines a
lot.

Jan

"William P. N. Smith" wrote:

> Reinoud van Leeuwen wrote:
> > If you login through *telnet* over a public network, you have a lot to worry
> > about! Telnet is so insecure, people can just sniff your password to get
> > into your box... (no hacking needed)
>
> Which people are those who can sniff your password?  Network administrators
> and such, but how does an 'ordinary' user watch theinternet promiscuously?