Re: Re: Fidonet and today
  By: Sampsa Laine to Sean Dennis on Thu Feb 24 2011 04:20 am

 > In reality of course I doubt anyone will produce this - since no one 
 > who cares about security uses telnet, and this wouldn't work for anything 
 > encrypted :)

With regards to BBS security, the exposure with telnet is limited. BBSes don't
use BBS credentials to provide OS-level priveliges. It probably wouldn't hurt
to make sure the user that runs the BBS is running at a level of
least privelige, in case the user can somehow get onto the box or find a way
to run a command remotely.

 
--kW

      kurt weiske ³ kweiske{at}realitycheckbbs.org
                  ³ 1:218/700{at}fidonet
--- SBBSecho 2.12-Win32