.Mac doesn't use the FTP protocol, it uses WebDAV. It would not be a good idea to give them your password and username for your iDisk as this will allow them access to all your .Mac account information (which they could then abuse at the Apple Store etc). If they want to modify your website, get them to export to their local disk and e-mail you the modified files instead.