Live data from Hacker News

The Day the Telnet Died

labs.greynoise.io

31–40 of 414 posts

Re: The Day the Telnet Died

#31
post #5

> Someone upstream of a significant chunk of the internet’s transit infrastructure apparently decided telnet traffic isn’t worth carrying anymore. That’s probably the right call. Does this impact traffic for MUDs at all? I know several MUDs operate on nonstandard Telnet ports, but many still allow connection on port 23. Does this block end-to-end Telnet traffic, or does it only block attempts to access Telnet service…

Most MUDs do not use Telnet. MUDs use plaintext TCP protocols that are accessible to a wide range of clients. The Telnet protocol is well-defined and not completely plaintext. There are in-band signaling methods and negotiations. Telnet is defined to live on 23/tcp as an IANA well-known, privileged, reserved port. MUDs do none of this. You can usually connect to a MUD using a Telnet client, but most players hate the…

As a MUD enthusiast of two decades, this is not accurate. Where are you getting this information?

Most MUDs implement RFC 854, and a number of non-standard Telnet option subnegotiation protocols have been adopted for compression (MCCP2), transmission of unrendered data (ATCP, GMCP, ZMP), and even a mechanism for enabling marking up the normal content using XML-style tags (MXP). These telopts build on the subnegotiation facility in standard Telnet, whose designers knew that the base protocol would be insufficient for many needs; there are a great number of IANA-controlled and standardized telopt codes that demonstrate this, and the MUD community has developed extensions using that same mechanism.

> You can usually connect to a MUD using a Telnet client, but most players hate the experience and often deride this method in favor of a dedicated, programmable client.

I think you are confusing "telnet" the program with "telnet" the protocol. I am speaking here of the protocol, defined at base in RFC 854, for which "telnet" the program is but one particularly common implementation. You look at any of those "dedicated, programmable clients" and they will contain an implementation of RFC 854, probably also an implementation of RFC 1143 (which nails down the rules of subnegotiation in order to prevent negotiation loops), and an implementation of the RFCs for several standard telopts as well as non-standardized MUD community telopts. I can speak for the behavior of MUSHclient in especial regard here, though I am also familiar with the underlying Telnet nature of Mudlet, ZMud, and CMUD, not to mention my very own custom-made prototype client for which I very much needed to implement Telnet as described above.

Re: The Day the Telnet Died

#32

Earlier quoted context omitted.

https://codeberg.org/inetutils/inetutils/commit/fa3245ac8c28...

That's crazy. This is core business critical software but they just YOLO critical changes without any automated tests? this PR would be insta-rejected in the small SAAS shop I work at.

https://xkcd.com/2347/

Ah, someone beat me to it!

Re: The Day the Telnet Died

#37

Earlier quoted context omitted.

https://codeberg.org/inetutils/inetutils/commit/fa3245ac8c28...

That's crazy. This is core business critical software but they just YOLO critical changes without any automated tests? this PR would be insta-rejected in the small SAAS shop I work at.

If you think you can do better you're welcome to do better. I say this without a hint of sarcasm. This is how open source works. It's a do–ocracy, not a democracy. Whoever makes a telnet server gets to decide how the telnet server works and how much testing it gets before release.

Re: The Day the Telnet Died

#38
post #3

Stranger article. I wasn't able to get the main point of this article. Strangely written, but hey - I'm nob native by any means. ps. telnet SDF.org just works...

it was just ai written thats why.. unexpectedly so from greynoise.

Re: The Day the Telnet Died

#40
post #22
post #12

So eleven years ago someone put a backdoor in the Telnet daemon. Who? Where's the commit?

Telnet's cleartext and always has been. A backdoor seems like overkill.

You still have to know the password or snoop on someone typing the password. But with this vuln, you don't. You can just get root instantly.
Post reply on HN