Scott D. Yelich writes:
 > -----BEGIN PGP SIGNED MESSAGE-----
 > 
 > 
 > 
 > On Tue, 3 Aug 1999, Russell Nelson wrote:
 > > There's a mirror at ftp://ftp.qmail.org/pub/koobera.math.uic.edu/
 > > which uses a more conventional (translation: insecure) FTP server.
 > 
 > What do you mean insecure?

Dan's anonftpd chroots itself, and there's no way out.  Crackers simply
cannot break authentication because there *is* no authentication.
Anybody can download only the files in the ftpd directory.  Anything
else is less secure.

 > What's the deal with DJB's FTP with no LS and crazy
 > filenames?

Isn't it about time we had an ftp server which cooperated with a
visual ftp client by giving it an easily parsed listing format?

-- 
-russ nelson <[EMAIL PROTECTED]>  http://crynwr.com/~nelson
Crynwr sells support for free software  | PGPok | Government schools are so
521 Pleasant Valley Rd. | +1 315 268 1925 voice | bad that any rank amateur
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | can outdo them. Homeschool!

Reply via email to