Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Enthusiast Zone > Networking > How secure is Apple File Sharing?

How secure is Apple File Sharing?
Thread Tools
Mac Enthusiast
Join Date: May 2001
Status: Offline
Reply With Quote
Dec 1, 2003, 03:06 AM
 
Hi,

I'm failing miserably at getting Pure-Ftpd working on Panther but need to connect two remote computers to each other accross the internet.

If I use the basic Apple File Sharing, am I at risk of having my passwords etc grabbed?

This is Panther -> Panther.

Thanks

Simon
     
Dedicated MacNNer
Join Date: Jul 2002
Location: Boston, MA
Status: Offline
Reply With Quote
Dec 2, 2003, 06:50 PM
 
FTP is pretty hopeless from a security standpoint unless SSL is involved. SFTP and SCP is built in and considerably more secure in so far as it can cipher credentials and the data being transfered. Plain old FTP will do neither of these.

AFP gives you a few options to try and secure things Apple Developer Site . I have not tried AFP over the Internet and don't really endorse it either, but that's not to say it is not a feasible option. I would need to do more research.

In my opinion I would use SFTP or SCP to transfer files back and forth. Tried and proven method for secure data transmission.
     
Mac Enthusiast
Join Date: May 2001
Status: Offline
Reply With Quote
Dec 3, 2003, 03:03 AM
 
Originally posted by kampl:
FTP is pretty hopeless from a security standpoint unless SSL is involved. SFTP and SCP is built in and considerably more secure in so far as it can cipher credentials and the data being transfered. Plain old FTP will do neither of these.

AFP gives you a few options to try and secure things Apple Developer Site . I have not tried AFP over the Internet and don't really endorse it either, but that's not to say it is not a feasible option. I would need to do more research.

In my opinion I would use SFTP or SCP to transfer files back and forth. Tried and proven method for secure data transmission.
kampl,

Thanks for your response.

I did finally get Pure-ftp running with the help of Pure-ftp Manager. Great bit of kit.

Would you suggest using something like Fugu <http://rsug.itd.umich.edu/software/fugu/> over ssh is better than using a secure ftp client with pure-ftp?

Would pure-ftp be faster?

Fugu looks good...

Let me know

Simon
     
Dedicated MacNNer
Join Date: Jul 2002
Location: Boston, MA
Status: Offline
Reply With Quote
Dec 3, 2003, 06:03 PM
 
Fugu looks interesting to me as well. In my experience SCP and SFTP are a bit slower when looking at transfer rates, and I have attributed this to the overhead of encrypting all the traffic for lack of a better reason. I can't comment however on transfer rates when using SSL and FTP. Straight FTP has been the performance leader in my experience, but I don't like usernames and passwords going out on the wire in plaintext for anyone with the know how to grab.

BTW, thanks for the link. That looks like a handy piece of software for when I'm feeling lazy.
     
Fresh-Faced Recruit
Join Date: Dec 2003
Status: Offline
Reply With Quote
Dec 10, 2003, 12:35 AM
 
It's going to be slower if you want it encryption, for exactly the reason mentioned: overhead. But... deal with it. Fugu is great.
     
Dedicated MacNNer
Join Date: Jul 2002
Location: Boston, MA
Status: Offline
Reply With Quote
Dec 10, 2003, 08:27 PM
 
Originally posted by Wyck:
It's going to be slower if you want it encryption, for exactly the reason mentioned: overhead. But... deal with it. Fugu is great.
Fugu is interesting I'll give it that. It's not some ground breaking thriller however.

And yes I do deal with it. Having been in the security business for some time I have come to deal with the overhead of securing connections and encrypting transfers. Thanks..........
     
Dedicated MacNNer
Join Date: Dec 2002
Location: someplace
Status: Offline
Reply With Quote
Dec 10, 2003, 10:51 PM
 
Originally posted by simonmartin:
I'm failing miserably at getting Pure-Ftpd working on Panther but need to connect two remote computers to each other accross the internet.
http://pureftpd.org/README.MacOS-X
If I use the basic Apple File Sharing, am I at risk of having my passwords etc grabbed?
http://www.afp548.com/Articles/security/sshtips.html
     
Mac Enthusiast
Join Date: May 2001
Status: Offline
Reply With Quote
Dec 11, 2003, 02:58 AM
 
gatorparrots,

http://pureftpd.org/README.MacOS-X


I've done exacly that. Still no go.

http://www.afp548.com/Articles/security/sshtips.html

Are you saying that Apple file sharing is over ssh?

Simon
     
Dedicated MacNNer
Join Date: Dec 2002
Location: someplace
Status: Offline
Reply With Quote
Dec 11, 2003, 12:05 PM
 
Originally posted by simonmartin:
http://pureftpd.org/README.MacOS-X
I've done exacly that. Still no go.
Try this, then:
http://www.macosxhints.com/article.p...31113075452804
http://www.afp548.com/Articles/security/sshtips.html
Are you saying that Apple file sharing is over ssh?
No, not by default. But that article I referenced shows you how to use SSH tunnels to wrap your AFP connections.
     
Mac Enthusiast
Join Date: May 2001
Status: Offline
Reply With Quote
Dec 11, 2003, 12:16 PM
 
Originally posted by gatorparrots:
Try this, then:
http://www.macosxhints.com/article.p...31113075452804

No, not by default. But that article I referenced shows you how to use SSH tunnels to wrap your AFP connections.
gatorparrots,

Try this, then:
http://www.macosxhints.com/article.p...31113075452804


Been there, done it. Still won't work.

Have you got Pureftpd to run in Panther?

I have the server running fine and it starts up at bootup time.

I attempt to control it using either PureFTPd Manager or webmin.

I appear to be able to create a new user using PureFTPd Manager. I also appear to be able to using webmin. In fact, I can't log in to these new accounts. If I create a new user in webmin, it even shows up in PureFTPd Manager. Still can't log in to it.

It really has me stumped. I've been working on it for weeks.

I would much rather use PureFTPd via webmin than anything else but I'd settle for anything right now.

Any thoughts?

Simon
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 02:15 AM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2