40

Today 🙄
This dev goes "I connect using plain FTP over a VPN to update why can't you!?"

Because it's unsecure you fucking idiot.

His FTP server can't even do secure connections. Some how.

Guess I have a new site to take over 😏

Comments
  • 2
    Sounds like trouble ahead unless this is fixed.
  • 8
    Well IF and only IF his ftp accepts connections ONLY from the VPN endpoint it is safe, as long as his vpn client is safe. Which means... it's not.
  • 1
    @Kimmax the only way the VPN is safe is if the VPN is a server on the same local network as the server your trying to access

    You can encrypt between you and the VPN that's over the internet that's safe.

    What's not is that if it's the VPN connecting using plain FTP because all your doing is moving the issue to the VPN.

    Whatever you do never send usernames and passwords in plain text

    If you try to IP lock it all you need to do is IP spoof which is simple ... Effectively not a secure method... At all
  • 1
    If only you would share the connection information with us 🤔
  • 0
    @PhantomBKB you know I know that right ;)
Add Comment