FTP is 50 years old • Hacker News Board

Re: FTP is 50 years old

#181

Post by LinuxBender » Sat, Apr 17, 2021, 6:09 PM UTC

tinus_hn wrote: post #154

chasil wrote: post #118

Earlier quoted context omitted.

I was forced to implement chroot() for SFTP users under Oracle/RedHat Linux 5. We are, alas, still running it. The OpenSSH 4.3 release on this platform does not support the "match" keyword, but I was able to coerce it to run a separate SFTP-only on port 24, where I constrained the SFTP-specific accounts. I find that I prefer this approach. My wily users then discovered that the working passwd entry also let them logi…

It uses pam so you can configure it however you want or even write your own module. It’s dangerous though, be sure to check these users don’t get shell access or the ability to create network pipes.

also symlinks and hardlinks. You can restrict this in the internal-sftp subsystem assuming you force sftp.

Re: FTP is 50 years old

#182

Post by LinuxBender » Sat, Apr 17, 2021, 6:10 PM UTC

LinuxBender wrote: post #128

chasil wrote: post #118

Earlier quoted context omitted.

I was forced to implement chroot() for SFTP users under Oracle/RedHat Linux 5. We are, alas, still running it. The OpenSSH 4.3 release on this platform does not support the "match" keyword, but I was able to coerce it to run a separate SFTP-only on port 24, where I constrained the SFTP-specific accounts. I find that I prefer this approach. My wily users then discovered that the working passwd entry also let them logi…

Makes sense. I also had to implement a work around "scponly" for CentOS 5. Not fun. I put a sftp server back up. Feel free to play around with it. This is a single sshd instance and a copy of the config is in the /pub directory of the anonymous user. I did not change anything in pam. The sftp users are selinux confined as user_u. server: 45.79.100.12 port: 22 username: anonymous, anon, pub, public pw: (null) just hit…

Updated this system. It should create accounts if you try to sftp to it. Just wait 2 mins and try the same name again. Any non system account 2 to 16 chars starting with alpha should work.

Re: FTP is 50 years old

#183

Post by jedimastert » Sat, Apr 17, 2021, 10:17 PM UTC

AdmiralAsshat wrote: post #25

Just in time for it to be completely removed from Chrome, Firefox, etc.

I don't know. Maybe I'm just of a different time, but I feel like ftp is outside the scope of a browser

Re: FTP is 50 years old

#184

Post by bsagdiyev » Sat, Apr 17, 2021, 10:41 PM UTC

mickael-kerjean wrote: post #153

desktopninja wrote: post #108

Old but not obsolete.

Definitly, there's about 10 millions server with port 21 opened (source: https://www.shodan.io/search?query=port%3A21 )

One of those is definitely mine. I have an anonymous FTP server up and serving a bunch of old goldsrc game maps and mods, mostly for my own nostalgia but sharing for anyone else who liked the original Half-Life series and mods as much as I did.

Re: FTP is 50 years old

#185

Post by nly » Sun, Apr 18, 2021, 10:21 AM UTC

kypro wrote: post #73

Not that I think we should go back, but I do miss the wildwest days of web development when it was still acceptable to FTP untested code straight to production. For my first dev job we would develop on production using an FTP client to push up changes on save. One day I was writing an SQL UPDATE statement and I forgot to include a WHERE clause. I basically nuked the entire product DB and it took days to recover becau…

It's still used a lot in finance for file delivery.

Re: FTP is 50 years old

#186

Post by qyi » Sun, Apr 18, 2021, 4:58 PM UTC

Modern cryptography is almost 50 years old.

Re: FTP is 50 years old

#187

Post by selfhoster11 » Tue, Apr 20, 2021, 2:03 PM UTC

moron4hire wrote: post #11

alex_anglin wrote: post #5

Earlier quoted context omitted.

Snail-mail ain't dead yet.

I believe Semaphore predates it

How so? Mail couriers are surely much older than semaphore systems of any kind.