LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-10-2004, 09:21 AM   #1
marghorp
Senior Member
 
Registered: Jan 2004
Location: Slovenia
Distribution: Slackware 10.1, SLAX to the MAX :)
Posts: 1,040

Rep: Reputation: 45
FTP exposes password


Hi!

I have set up a VSFTP Daemon and now when I connect from Windows with Internet Explorer it works great, except for one anoying thing. If I run files directly from ftp, the address remains in the adress bar for future browsing.

The thing that happens is :

the address ftp://userassword@myserver is in the history of explorer. How can I prevent that from hapenning or how can I prevent running files directly from FTP? I know that can be done, just don't know how. Please someone help me. I have now some delicate data being available to people that shouldn't see it.

Thanks!

Marghorp
 
Old 02-10-2004, 09:26 AM   #2
jtshaw
Senior Member
 
Registered: Nov 2000
Location: Seattle, WA USA
Distribution: Ubuntu @ Home, RHEL @ Work
Posts: 3,892
Blog Entries: 1

Rep: Reputation: 67
My suggestion is to not use ftp at all. Go to the Putty Download Page and download pscp and use that for file transfers. It uses ssh so it is secure, while ftp is not.

The only way to have IE not cache that is probably to tell IE to keep no history.
 
Old 02-10-2004, 09:44 AM   #3
marghorp
Senior Member
 
Registered: Jan 2004
Location: Slovenia
Distribution: Slackware 10.1, SLAX to the MAX :)
Posts: 1,040

Original Poster
Rep: Reputation: 45
It must be done

I know using FTP is not secure, but I don't need to be super secure, only not to expose passwords as that is so stupid. I know other servers have it. The one that hosted my page before, had it, so why can't I set it up that way?

I know don't use it is a good solution, but it's not a great one. If it doesn't work, don't use it. That will help, but not solve the problem. Thanks for the suggestion though, but what is done is done. The usernames are out, and so are the passwords, I can't say DON'T USE IT NOW.

So please give me a better solution. Thanks anyway!

Marghorp
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ftp password error master Linux - Software 4 05-19-2005 03:59 PM
ftp user account password.... tosszafer Linux - Security 1 10-30-2004 06:05 PM
ftp server side user password..... tosszafer Linux - Software 1 10-29-2004 12:39 PM
username and password for proxy (ftp install) dutty Mandriva 0 05-19-2004 12:24 PM
Password Authentication works for TELNET... but not FTP GEEXTER Linux - General 5 07-30-2003 04:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:09 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration