Live data from Hacker News

The Day the Telnet Died

labs.greynoise.io

151–160 of 414 posts

Re: The Day the Telnet Died

#151
post #15
post #7

Earlier quoted context omitted.

It wasn’t clear from the article but I assumed they were filtering for the attack specifically. Since Telnet is totally plain text that would absolutely be easy to do right?

Wouldn't that imply that >80% of all monitored telnet sessions were exploit attempts for the specific CVE in question? Even with the scale of modern botnets, that seems unrealistic for a single vuln that was undisclosed at the time.

I have a hard time thinking it’s popular enough these days that attacks, attempts at attacks, or just command and control couldn’t be the main use.

Re: The Day the Telnet Died

#152

What an amazing bug. I probably spent my first 10 years on the internet just using telnet. They were wild times. You could log ethernet traffic and see passwords. Towards the end of those we started to have a few more single-user machines, but the vast majority were old school many many user machines, where "root" was thought to be tightly restricted (of course, even then, in practice it wasn't if you were in the kno…

I never sent root over telnet, but I spent too much vacation time browsing the web via lynx on my school AIX account from a library near my parents' home, because it had a telnet client in addition to the card catalogue program on the otherwise locked down desktop. It was just a more innocent time: you didn't assume your traffic was being logged six ways to Sunday. With telnet access to my AIX account, I could do all the internet things, like mail (pine) and the web (lynx) and irc, from a convenient command line anywhere in the world.

Re: The Day the Telnet Died

#153

Earlier quoted context omitted.

Aardwolf works well from my work laptop. And I don’t care if someone sees what I’m doing

Do you care if they steal your account though and drop all your inventory? The problem is the auth is plain text too and you're open to having your credentials stolen.

TBH, I don’t care if someone drop all my inventory and delete my account. If I would care about it then I would obviously not use telnet.

Re: The Day the Telnet Died

#154
post #149
post #131

Earlier quoted context omitted.

I run a DikuMUD that users connect to using Telnet I really should update it to allow more secure options

> that users connect to using Telnet Not anymore ;) Seriously though: did you notice any spikes up or down? If you'd run it on a non-standard port, anyone can still connect with netcat, socat, etc etc.

Or with telnet (the client)

Re: The Day the Telnet Died

#155

Why are people still using telnet across the internet in this century? Was this _all_ attack traffic? (OK, I know one ancient talker that uses it - but on a very non-standard port so a port 23 block wouldn't be relevant)

Telnet is used in legacy, IoT, embedded, and low-level industrial hardware. It's also intentionally enabled on devices where automation was written for telnet and it wasn't easy to switch to ssh. If you investigate most commercial uses of ssh, the security is disabled or ignored. Nobody verifies host keys, and with automation where hosts cycle, you basically have to disable verification as there's no easy way around…

> Very few people use SSH with 2FA.

PCI DSS, HIPAA, and ISO 27001 each either highly recommend or enforce this.

I wouldn't use a jumphost without it.

Re: The Day the Telnet Died

#156
post #149
post #131

Earlier quoted context omitted.

I run a DikuMUD that users connect to using Telnet I really should update it to allow more secure options

> that users connect to using Telnet Not anymore ;) Seriously though: did you notice any spikes up or down? If you'd run it on a non-standard port, anyone can still connect with netcat, socat, etc etc.

Ah, not really. We are on a non-standard port (9000). I just meant some folks use the telnet client to connect, and we do negotiate some telnet options. I use tintin++ these days but I think most of our players are still using decades old zMUD versions to connect!

Re: The Day the Telnet Died

#157

Why are people still using telnet across the internet in this century? Was this _all_ attack traffic? (OK, I know one ancient talker that uses it - but on a very non-standard port so a port 23 block wouldn't be relevant)

nethack.alt.org still maintains a telnet server!

I've always used ssh to connect to it. And it's true that their port 23 is still open at last check. If you cannot reach port 23, and you irrationally hate ssh, you may use 14321 as an alternate.

https://www.alt.org/nethack/

Re: The Day the Telnet Died

#158

Earlier quoted context omitted.

Not GP, but my local Ministral 3 14B and GPT-OSS 20B didn't catch anything unless I gave some hints.

He says 'well known' so I assume Claude or GPT, I just don't get why he's being coy.

I thought by not naming it wouldn't shift the focus to the particular model, but it did the opposite. It was gpt-5.3-codex in medium mode.

Re: The Day the Telnet Died

#159

Earlier quoted context omitted.

The kernel could authenticate the user before starting it.

How does it do that?

There are many ways from passkeys to SAML. Though for complex methods we may want a dedicated services outside the kernel.

Re: The Day the Telnet Died

#160

Earlier quoted context omitted.

> IMHO we need a good telnet replacement that sends signed data. Most people interpret signatures as allowed under FCC rules, just not encryption. I know from bitter experience that IPsec is a “now you have two problems” kind of solution, but the Authentication Header is a thing and is supported by most (all?) implementations. Ham radio operators probably don’t have much use for the actual features of telnet compared…

TIL that IPsec can be used without encryption. That should work pretty well. Telnet is mostly used for auth and straightforward terminal/BBS access in my experience. There are some other alternatives like HamSSH but I don’t think it’s that common.

What I meant in my remark about Telnet is that, if you just want is a bidirectional byte pipe to e.g. run a terminal over, then you just need TCP or anything else providing the same abstraction, like TLS-over-TCP or TCP-over-IPsec; whether you then choose to run a getty on that terminal is not for the network to care. (I don’t believe you can get netcat to drive a PTY, so you’ll need e.g. socat. And of course if you want cryptographic authentication then you don’t need or want a getty.)

Telnet, on the other hand, is quite a bit fancier than that and has a fairly involved feature negotiation mechanism for terminal connections that is not entirely in line with the prevalent DEC tradition. As admittedly one of the funkiest examples of what you can do with it, there is for instance a mode[1] where the client is asked to emulate a terminal of the IBM 3270 lineage. (To a practicioner of the aforementioned DEC tradition, those feel like the marsupials of terminals: everything is functionally there, but primitive and derived are occasionally flipped and some features are oddly weak or misdesigned due to a lack of competition.) So if you do actually use Telnet the protocol, by all means, I’ll be delighted to learn what you do with it (partly why I asked in the first place). But if you just need a pipe, then TCP is enough, and netcat or socat make fine ad-hoc clients.

[1] https://tools.ietf.org/html/rfc6270

Post reply on HN