ztrauq

Can't you simply set the indexing mode to "No Index" in the CPanel?

This is somewhat in relation to the previous post on FTP security. I've heard some rumors about an FTP daemon that can run FTP over SSL, as well as the possibility of setting up an SSL tunnel between sites and then running FTP through that. I've also heard from some UNIX experts that you can a secure ftp or secure copy program as a subset of OpenSSH, without allowing a full login to a command shell. Are any of these solutions being looked at for TCH? Right now, TCH security seems good, with FTP's sending passwords in the clear as the only weak point - I'd be interested to know if you're working on solutions other than using File Manager over SSL (which is very cumbersome for uploading large numbers of files, as you can only select them a few at a time).

Does anyone know to what extent this worm had affected TCH servers? I know that it's caused some problems with my ISP's connectivity, and I was just wondering how well TCH is weathering this onslaught.

For secure email, I've been using a form processor called SouperMail, which can interface directly with the Gnu Privacy Guard installed on TCH servers and encrypt messages with your PGP key before sending them. I'm not sure about the PC side, but for macs, I've been using the personal version of PGP, which interfaces directly with the mail program, and only decrypts the message for the current session - quit the program and come back, and it's still encrypted. You could also just use Gnu Privacy Guard to decrypt the messages - it has GUIs for both Mac and Windows (and Linux, of course), and upon decryption displays the plaintext in a separate window, leaving the original message in its encrypted form.

I've also come across Spybot S&D, and I have to say it does a great job without locking up my computer, as Ad-Aware has been doing. It also has the ability to "immunize" IE against a number of browser hijackers and other things that mess with it. Spybot also mentions another suite of programs by JavaCool Software, which do an even better job of getting rid of browser hijacks. It's also important to note that Spybot S&D does a much quicker scan than Ad-Aware's default scan, at least on my comp.

Does TCH support (or even allow) some type of audio streaming from its servers? if so, what protocol does it use? If not, does anyone know of any free streaming-type scripts/programs that could be loaded onto a TCH account? TCH Stones

Securing Your PC - Just a small post detailing the best security software I've found for locking down your PC and protecting it from intruders. If you're looking for Linux Security as well, insecure.org recently released their Top 100 Security Tools, many of which I have used with favorable results.

If you're using a Mac, Fetch is a good FTP client, albeit shareware... if you're looking for a good free FTP client, try RBrowserLite. Both of them can be found with a google search or at versiontracker.com.

I'm testing out a versatile form processor called SouperMail right now, and I was wondering, do we have Gnu Privacy Guard installed? I know CPanel has an option for storing your gpg keys, but I can't tell whether gpg itself is installed, or what the path to it is. The idea is that the script has GPG functionality, and I would like to set up a from where people can automatically send messages encrypted to my GPG/PGP key so that their correspondence can be handled in a secure manner. TCH Stones

Is there any way to securely transfer files via scp, sftp, or other secure approaches that do not require your password to be sent in the clear? If not, will these services be made available at some point in the future? Also, can you use the shared SSL certificate to securely log into your cpanel?

Just a couple of security-related questions: - Does the login to CPanel transmit login information in the clear? - Are there any plans to move to a more secure file transfer protocol than FTP?