Recommendations for secure ftp software?

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Shoplifter
    Richest man in Babylon
    • Jan 2002
    • 5846

    #1

    Recommendations for secure ftp software?

    It looks like someone may have been into my cuteftp.

    Anyone recommend a secure ftp program that stores passwords in an encypted format?
  • CYF
    Coupon Guru
    • Mar 2009
    • 10973

    #2
    use sftp. Don't store passwords.
    Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more!
    AmeriNOC Coupons | Certified Hosting Coupons | Hosting Coupons | Domain Name Coupons

    Comment

    • Klen
      • Aug 2006
      • 32235

      #3
      Step number one:use SFTP protocol only and restrict access to your ip or your key only.Step number two:use winscp or filezilla portable version

      Comment

      • MediaGuy
        Confirmed User
        • Sep 2004
        • 5500

        #4
        Most ftp clients use an xml file that can be jacked when you upload - you can use sftp, or change your password everytime or just never save your password in the site manager.

        .

        YOU Are Industry News!
        Press Releases: pr[at]payoutmag.com
        Facebook: Payout Magazine! Facebook: MIKEB!
        ICQ: 248843947
        Skype: Mediaguy1

        Comment

        • Captain Kawaii
          So Fucking Banned
          • Oct 2007
          • 6748

          #5
          What they said... Cool advice guys.

          Comment

          • Cash4Me
            Confirmed User
            • Feb 2010
            • 188

            #6
            You should care about your network not about the FTP client.
            Even if the app stores password with encryption, FTP protocol send username and password in plain text, anyone on your network who is sniffing (Wireshark?) your data can read that.
            Use SSH with SFTP, I advice you to use WinSCP client if your hosting has SSH enabled
            "Cowards die many times before their deaths. The valiant never taste of death but once"
            (William Shakespeare)

            Comment

            • MediaGuy
              Confirmed User
              • Sep 2004
              • 5500

              #7
              Originally posted by Cash4Me
              You should care about your network not about the FTP client.
              Even if the app stores password with encryption, FTP protocol send username and password in plain text, anyone on your network who is sniffing (Wireshark?) your data can read that.
              Use SSH with SFTP, I advice you to use WinSCP client if your hosting has SSH enabled
              Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

              I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

              I thought?

              YOU Are Industry News!
              Press Releases: pr[at]payoutmag.com
              Facebook: Payout Magazine! Facebook: MIKEB!
              ICQ: 248843947
              Skype: Mediaguy1

              Comment

              • CYF
                Coupon Guru
                • Mar 2009
                • 10973

                #8
                Originally posted by MediaGuy
                Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

                I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

                I thought?
                regular ftp sends your password over the internet in the clear. Anyone between you and your server can read it. FTP is just fine if you're running a public repository that people can download from where passwords are not sent. If you're using FTP for anything that requires a password then FTP is outdated for that use.

                SFTP or SCP is the way to go for secure transfers.
                Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more!
                AmeriNOC Coupons | Certified Hosting Coupons | Hosting Coupons | Domain Name Coupons

                Comment

                • Cash4Me
                  Confirmed User
                  • Feb 2010
                  • 188

                  #9
                  Originally posted by MediaGuy
                  Are they just reading from the file the user/pass are "sent" from or from the actual data transfer between the client and the FTP server?

                  I had that problem once and just stopped saving - never had another hack again. No data file, no data find...

                  I thought?
                  Packets between your client and the FTP server.
                  "Cowards die many times before their deaths. The valiant never taste of death but once"
                  (William Shakespeare)

                  Comment

                  • Dappz
                    Confirmed User
                    • Dec 2009
                    • 997

                    #10
                    it insteresting to know more ftp client to be use


                    Hentai Artist * Draw My Anime *
                    HentaiLovers * hentaiG4H * ICQ : 657458

                    Comment

                    Working...