[39842] in North American Network Operators' Group
Re: 'we should all be uncomfortable with the extent to which luck..'
daemon@ATHENA.MIT.EDU (Mark Boolootian)
Wed Jul 25 13:15:06 2001
Date: Wed, 25 Jul 2001 10:14:37 -0700
From: Mark Boolootian <booloo@cats.ucsc.edu>
To: Chris Rapier <rapier@psc.edu>
Cc: Roeland Meyer <rmeyer@mhsc.com>, "'k claffy'" <kc@ipn.caida.org>,
nanog@nanog.org, caida@caida.org
Message-ID: <20010725101437.D9794@root.ucsc.edu>
Reply-To: booloo@cats.ucsc.edu
Mail-Followup-To: Chris Rapier <rapier@psc.edu>,
Roeland Meyer <rmeyer@mhsc.com>, 'k claffy' <kc@ipn.caida.org>,
nanog@nanog.org, caida@caida.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3B5EE9C1.6FCA890B@psc.edu>; from rapier@psc.edu on Wed, Jul 25, 2001 at 11:46:09AM -0400
Errors-To: owner-nanog-outgoing@merit.edu
> > How many of us here run anything less than SSH and even allow telnetd to
> > live on any of our hosts?
>
> Here? Probably not all that many.
I wouldn't be so sure. You might want to take a look at the first couple
of minutes of this session from the last NANOG meeting:
http://www.nanog.org/mtg-0105/real/dnssec.ram
It suggests that many (most?) of the NANOG attendees are shipping passwords
around in the clear (not necessarily all telnet, but indicative of a mindset).
I think this suggests the problem is far worse than most people imagine.
mb
