ticalc.org
Basics Archives Community Services Programming
Hardware Help About Search Your Account
   Home :: Archives :: News :: FTP Service Turned Off

FTP Service Turned Off
Posted by Magnus on 23 September 2003, 20:51 GMT

Due to repeated security issues, ftp service has been shut down. The archives are still fully accessible using http. In the belief that this is sufficient, ftp service will not be restored in order to avoid future problems.

Modification access to hosted sites is also down at the moment. We expect this to be fixed within a couple of weeks. Web access to hosted sites still works fine.

Update (Henrik): This article is now read only to stop the wild speculation and useless discussion. Move on people.

 


The comments below are written by ticalc.org visitors. Their views are not necessarily those of ticalc.org, and ticalc.org takes no responsibility for their content.


Re: FTP Service Turned Off
neo88 Account Info

Did somebody figure out how temporarily disable it? if this happens a lot, there is probably a security patch for it somewhere on the web. Please, oh please don't stop FTP service! Better yet you could upgrade to a Linux server, if you don't already use one. The FTP domain is a little harder to crack on FreeBSD, or so I hear.

     23 September 2003, 22:59 GMT


Re: Re: FTP Service Turned Off
Joey Gannon  Account Info
(Web Page)

We are using a Linux server, and the problems with FTP are too numerous to mention. Why do you want it so bad?

     24 September 2003, 01:21 GMT


Re: Re: Re: FTP Service Turned Off
David Phillips  Account Info
(Web Page)

The security problems are due to using insecure software. If you switched to publicfile for FTP downloads, you would never again have a security problem.

FTP uploads will always have security issues due to the FTP protocol. See the URL with this post for more info.

     24 September 2003, 03:19 GMT


Re: Re: Re: Re: FTP Service Turned Off
henrik Account Info
(Web Page)

Hah, so you promise security for life? Get real man and grow up.

     24 September 2003, 09:20 GMT


Re: Re: Re: Re: Re: FTP Service Turned Off
David Phillips  Account Info
(Web Page)

Find a security hole in the publicfile ftpd, as defined by the qmail and djbdns guarantees (i.e. nothing related to the OS, browser, etc.), and I'll give you $100.

Read the code. It's secure.

     24 September 2003, 17:08 GMT


Re: Re: Re: Re: Re: Re: FTP Service Turned Off
lord_nightrose Account Info
(Web Page)

>>Find a security hole in the publicfile ftpd... and I'll give you $100

Funny how earlier you said that the author of the software would give him $500...

>>Read the code. It's secure.
HA! HAHAHAHAHAHA! Oh, okay, let's read the code... yep... looks secure to me! Of course, I'm omniscient, so I know everything this code does and I can predict every single possible security flaw in it...

If someone says that their software is totally secure, it's because they spend their entire life patching all the problems they find before anyone else can find them.

     24 September 2003, 17:35 GMT


Re: Re: Re: Re: Re: Re: Re: FTP Service Turned Off
David Phillips  Account Info
(Web Page)

There is a guarantee from Dan on qmail and djbdns, not on publicfile.

With most code, it is difficult or impossible to see security holes (such as buffer overflows) just from reading the code. With secure code, such as that of publicfile, it is possible. Read it and you will see the difference.

And if you think patching software makes it secure, then you're an idiot. Code is secure by not having any security holes in the first place..

     24 September 2003, 17:52 GMT

Re: Re: Re: Re: Re: Re: Re: Re: FTP Service Turned Off
lord_nightrose Account Info
(Web Page)

You obviously didn't read my post very carefully. I said that "they spend their entire life patching all the problems." Obviously this doesn't mean patching it will fix it permanently. That's a given.

The problem with making code secure by leaving out security holes is what you just said:
"With most code, it is difficult or impossible to see security holes (such as buffer overflows) just from reading the code."

What you said implies that code can never be secure unless it doesn't exist.

1. With most code, it is difficult or impossible to see security holes (such as buffer overflows) just from reading the code.
2. Code is secure by not having any security holes in the first place.

THEREFORE, you can't have secure code, because you won't KNOW if there are any security holes to fix, because the code isn't secure, and they're almost impossible to find...

     24 September 2003, 19:25 GMT


Re: Re: Re: Re: Re: Re: Re: Re: FTP Service Turned Off
lord_nightrose Account Info
(Web Page)

What I'm trying to say is that the point in development when code becomes "secure" by your standards does not exist. You're trying to say that somehow, code 'magically' becomes secure and all the security holes disappear. However, you also said you wouldn't SEE the security holes unless the code was secure. So how would the security holes disappear if you didn't know where they were to get rid of them?

Logic is good, man.

     24 September 2003, 19:26 GMT

Re: FTP Service Turned Off
Drantin  Account Info

Can't the option to download via FTP be left on? Oh well... now I get to experiment with the recursive and masking features of wget....

     23 September 2003, 23:01 GMT

Re: FTP Service Turned Off
W Hibdon  Account Info

NOOOOOOOOOOOO!!!!!!!!!!!!!!!!

Now that the FTP site is down, there is no way for me to download all the files all at once! You all really need to get the all files link back up.

-W-

     24 September 2003, 00:09 GMT

Re: Re: FTP Service Turned Off
Joey Gannon  Account Info
(Web Page)

>You all really need to get the all files link back up.

Don't count on it.

     24 September 2003, 00:18 GMT


Re: Re: Re: FTP Service Turned Off
W Hibdon  Account Info

But why in God's name not? I was never clear on why it was taken down in the first place. Why was it? And why, for the love of all things holy is it not going to be back up?

-W-

     24 September 2003, 02:00 GMT


Re: Re: Re: Re: FTP Service Turned Off
Drantin  Account Info

It must have been a pain to maintain, and a drag on system resources...

It was also usually out of date...

just try using some of the recursive functionality of wget (there's a windows version out there somewhere...) and have it download all the zips over http...

     24 September 2003, 02:55 GMT


Re: Re: Re: Re: Re: FTP Service Turned Off
W Hibdon  Account Info

I was refering mainly to the "allfiles.zip" on the http side of things.

-W-

     24 September 2003, 03:27 GMT


Re: Re: Re: Re: Re: Re: FTP Service Turned Off
Drantin  Account Info

So was I... The maintaining of such a file, in every directroy on a site this big would put a horrendous strain on the server... every time a file was added...

     24 September 2003, 05:25 GMT


Re: Re: Re: Re: Re: Re: Re: FTP Service Turned Off
Joey Gannon  Account Info
(Web Page)

Yeah... the lag we faced when adding files has reduced significantly, but that's merely a bonus. :-)

     24 September 2003, 07:39 GMT

Re: Re: FTP Service Turned Off
Morgan Davies  Account Info
(Web Page)

You can always take what you have an just add to it the files that come in every day. Or get server access and download them that way :-)

     24 September 2003, 03:06 GMT


Re: Re: Re: FTP Service Turned Off
W Hibdon  Account Info

I have no current, mom deleted them.

Pay attention, man. :-)

-W-

     24 September 2003, 03:29 GMT


Re: Re: Re: Re: FTP Service Turned Off
lord_nightrose Account Info
(Web Page)

>>I have no current, mom deleted them.
... <i>what</i>??

     24 September 2003, 17:37 GMT


Re: Re: Re: Re: Re: FTP Service Turned Off
W Hibdon  Account Info

Yeah, my mom does not approve of me having games on my calc, or any programs, for that matter. I honestly don't know why, but she does not, and I don't care to ask. I can conduct my coding in secrete, but as for files, I am staying away from that for a while.

-W-

     24 September 2003, 23:07 GMT


Re: Re: FTP Service Turned Off
DWedit  Account Info
(Web Page)

wget -r -np http://www.ticalc.org/pub/ -l9

:)
or something like that

     24 September 2003, 18:16 GMT

1  2  3  

You can change the number of comments per page in Account Preferences.

  Copyright © 1996-2012, the ticalc.org project. All rights reserved. | Contact Us | Disclaimer