Re: encrypt the password stored in a file

JupiterHost.Net wrote:
>
>
> Ken Perl wrote:
>
>> The password used to access a ftp server is stored in a text file, the
>> perl program gets the password from the file, the pass it to the ftp
>> server for logon, this is the background.
>> The requirement is encrypt the password store in a more secure way,
>> and the perl program could still use the encrypted password to logon
>> the server. what algorithm should be used in this task?
>
>
> Any Crypt:: modules would help but then the way to unencrypt it is still
> in a file. You be better off doing:
>
> my $password = 'plaintext';
>
> chown user:user config.pm
> chmod 600 config.pm
>
> that way only the user can read it so it can safely be in plain text.
>
> Obscuring it is a lame way to do it because any moron with half sense
> can figure out how you unobscure it if they have access to the file anyway.
>
> Permissions, permission, permissions :)
>
> HTH :)
>
Considering it is FTP who cares about permissions too. It is an insecure
protocol to begin with, the password is sniffable during transmission
anyways, really the words FTP and secure don't belong in a sentence
together, unless they are included with the word NOT.

http://danconia.org
.

Relevant Pages

  • Re: IIS Server w/FTP
    ... each user / server, NTFS file permissions set on each home directory [e.g. ... Note that according to this article, "When anonymous users view the FTP ... they can only view the contents of the root folder. ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS 6 FTP
    ... the server after making a permissions change causes the settings to work ... This leads me to believe that the settings are cached ... Objet: IIS 6 FTP ... I configured permissions using two groups: ...
    (Security-Basics)
  • IIS6
    ... some of our users want to use ftp for changing files with external partners. ... We use WS_FTP 4.02 Server and have a http frontend for our users. ... permissions runs this script on the intranet page it doesn't work. ... Admin Users can still use the feature and create users. ...
    (Security-Basics)
  • Re: FTP receive dont work from unix !!!
    ... Does the BizTalk Server Service user account have RW permissions over the ... remote FTP? ...
    (microsoft.public.biztalk.general)
  • Re: Checking filenames? [:: ?Kinda Solved? ::]
    ... The goal, a simple perl script to backup a web directory, compress the ... archive and then ftp the fileto a remote server. ... # Loop over array and check for matching files and anything older than ...
    (perl.beginners)