Recommendations for secure ftp software? - GoFuckYourself.com

Shoplifter · 07-09-2011, 01:02 PM

It looks like someone may have been into my cuteftp.

Anyone recommend a secure ftp program that stores passwords in an encypted format?

CYF · 07-09-2011, 01:08 PM

use sftp. Don't store passwords.

Klen · 07-09-2011, 01:19 PM

Step number one:use SFTP protocol only and restrict access to your ip or your key only.Step number two:use winscp or filezilla portable version

MediaGuy · 07-09-2011, 02:13 PM

Most ftp clients use an xml file that can be jacked when you upload - you can use sftp, or change your password everytime or just never save your password in the site manager.

.

Captain Kawaii · 07-09-2011, 02:16 PM

What they said... Cool advice guys.

Cash4Me · 07-09-2011, 02:50 PM

You should care about your network not about the FTP client.
Even if the app stores password with encryption, FTP protocol send username and password in plain text, anyone on your network who is sniffing (Wireshark?) your data can read that.
Use SSH with SFTP, I advice you to use WinSCP client if your hosting has SSH enabled

MediaGuy · 07-09-2011, 02:57 PM

Quote:

Originally Posted by Cash4Me

You should care about your network not about the FTP client.
Even if the app stores password with encryption, FTP protocol send username and password in plain text, anyone on your network who is sniffing (Wireshark?) your data can read that.
Use SSH with SFTP, I advice you to use WinSCP client if your hosting has SSH enabled

Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

I thought?

CYF · 07-09-2011, 03:12 PM

Quote:

Originally Posted by MediaGuy

Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

I thought?

regular ftp sends your password over the internet in the clear. Anyone between you and your server can read it. FTP is just fine if you're running a public repository that people can download from where passwords are not sent. If you're using FTP for anything that requires a password then FTP is outdated for that use.

SFTP or SCP is the way to go for secure transfers.

Cash4Me · 07-10-2011, 04:29 AM

Quote:

Originally Posted by MediaGuy

Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

I thought?

Packets between your client and the FTP server.

Dappz · 07-10-2011, 04:33 AM

it insteresting to know more ftp client to be use

07-09-2011, 01:02 PM	#1
Shoplifter Richest man in Babylon Industry Role: Join Date: Jan 2002 Location: Posts: 10,002 Posts: 5,679	Recommendations for secure ftp software? It looks like someone may have been into my cuteftp. Anyone recommend a secure ftp program that stores passwords in an encypted format?

07-09-2011, 01:08 PM	#2
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	use sftp. Don't store passwords. __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons

07-09-2011, 02:13 PM	#4
MediaGuy Confirmed User Industry Role: Join Date: Sep 2004 Location: Montrealquebecanada Posts: 5,500	Most ftp clients use an xml file that can be jacked when you upload - you can use sftp, or change your password everytime or just never save your password in the site manager. . __________________ YOU Are Industry News! Press Releases: pr[at]payoutmag.com Facebook: Payout Magazine! Facebook: MIKEB! ICQ: 248843947 Skype: Mediaguy1

07-09-2011, 02:50 PM	#6
Cash4Me Confirmed User Join Date: Feb 2010 Location: MoneyShire Posts: 188	You should care about your network not about the FTP client. Even if the app stores password with encryption, FTP protocol send username and password in plain text, anyone on your network who is sniffing (Wireshark?) your data can read that. Use SSH with SFTP, I advice you to use WinSCP client if your hosting has SSH enabled __________________ "Cowards die many times before their deaths. The valiant never taste of death but once" (William Shakespeare)

07-10-2011, 04:33 AM	#10
Dappz Confirmed User Join Date: Dec 2009 Posts: 997	it insteresting to know more ftp client to be use __________________ Hentai Artist * Draw My Anime * HentaiLovers * hentaiG4H * ICQ : 657458

07-09-2011, 01:19 PM	#3
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Step number one:use SFTP protocol only and restrict access to your ip or your key only.Step number two:use winscp or filezilla portable version

07-09-2011, 02:16 PM	#5
Captain Kawaii So Fucking Banned Industry Role: Join Date: Oct 2007 Posts: 6,748	What they said... Cool advice guys.