PuTTY is a good example where the author resisted to turn it into bloatware. It is minimal and does the thing it is supposed to do.
That may or may not be a good thing. Personally I cannot live without tabs and bookmarks so I use mRemoteNG.
PuTTY 0.68 has been released
91–100 of 152 posts
Re: PuTTY 0.68 has been released
#92On Windows 10, with Windows Subsystem for Linux installed, I don't find myself using Putty anymore.
Same here, but I can't figure out how to fix my main annoyance with the WSL: deactivating the bell!!! There is no reason for my computer to be making noises when I'm using tab completion!!!!!!!!!!
Have you tried this?
To disable beep of the bash you need to uncomment/add set bell-style none in your /etc/inputrc file
To disable beep of programs like vim (I've tested only with that) you need to create - if it's not already there - a .bash_profile and add setterm -blength 0
Re: PuTTY 0.68 has been released
#93Earlier quoted context omitted.
Same here, but I can't figure out how to fix my main annoyance with the WSL: deactivating the bell!!! There is no reason for my computer to be making noises when I'm using tab completion!!!!!!!!!!
Have you tried this? To disable beep of the bash you need to uncomment/add set bell-style none in your /etc/inputrc file To disable beep of programs like vim (I've tested only with that) you need to create - if it's not already there - a .bash_profile and add setterm -blength 0 http://stackoverflow.com/a/36726662
You are my hero!!!
Thanks! It worked perfectly!
Re: PuTTY 0.68 has been released
#94Earlier quoted context omitted.
What advantages does it offer over PuTTY?
Easy to open multiple terminals from the same connection, built-in SFTP. Probably better font rendering or something.
In PuTTY you can right-click on the title bar and click "Duplicate Session" to open another connection to the same server (if that's what you mean).
Re: PuTTY 0.68 has been released
#95PuTTY is one of the first things I install when setting up a new Windows machine!
Re: PuTTY 0.68 has been released
#96Putty used to be the go-to tool for Windows SSH, but nowadays I'm using Bitvise SSH client. It's worth a try.
Have you ever tried XShell5?
https://www.netsarang.com/products/xsh_overview.html
It's free for Home/school use. I have tried all Windows SSH clients, and it is by far the best SSH client I have ever used.
Re: PuTTY 0.68 has been released
#97Earlier quoted context omitted.
And obviously a network attacker would never think to modify the insecurely served downloads page to point to a different download URL.
This is a possibility. But downloads have been served out of "the.earth.li/~sgtatham/putty/" for years. Yes, it's owned by someone else and exploding turtles all the way down [1], but now that "the.earth.li/~sgtatham/putty/" is HTTPS, the checksums are properly authentic as attested by the same operator as the one who has supplied PuTTY downloads for years. I've mirrored the most important checksums here, another HTT…
This requires custom knowledge. If an attacker swaps out the page and serves the links from some other unusual site (or even the.earht.li), who is going to notice? Only old-school people with that custom knowledge who also check the source of the download link.
I find it bizarre that the server is managed by the guy who wrote dpkg (which involves GPG), yet still doesn't have https on it...
Re: PuTTY 0.68 has been released
#98Earlier quoted context omitted.
Isn't this "DLL hijacking" thing a bit overblown? The directory an application runs from on Windows has always been considered part of the security perimeter of the application. If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?
Not a windows person, so I can't speak to how the directory is treated, but I've watched enough people run applications from the Downloads directory to wonder about it.
[deleted]
Re: PuTTY 0.68 has been released
#99Earlier quoted context omitted.
At this point it's totally inexcusable. Just buy the SSL cert already, or get a free one from Let's Encrypt.
Note the "s". TLS 1.2, AES 256 GCM, ECDHE_RSA. Hard to ask for more than that. https://the.earth.li/~sgtatham/putty/0.68/
The only "s" I see is in 'sgtatham' and 'releases'. If the webpage that lists the link is unsecured, who's to say that the listed links are valid?
http://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0...
Re: PuTTY 0.68 has been released
#100Earlier quoted context omitted.
Isn't this "DLL hijacking" thing a bit overblown? The directory an application runs from on Windows has always been considered part of the security perimeter of the application. If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?
Not a windows person, so I can't speak to how the directory is treated, but I've watched enough people run applications from the Downloads directory to wonder about it.
That's an interesting point, otherwise I'd say it's basically the Windows equivalent of LD_PRELOAD. Running executables from the "downloads" directory is certainly a thing though, never realized the security implication there (beyond trusting the download natch)