Access to OCCS

Interactive Shell | File Copying | E-mail

Problem:

Telnet, FTP, POP3, IMAP and rsh/rlogin all send your username and password over the internet/network in clear text. If someone wants to get your username/password badly enough, they can listen and record them, or if you are connection from the internet, anyone between your ISP and OCCS can record them. Once a cracker has a single username/password combination they can log onto OCCS and proceed to do nefarious things, including but not limited to:
  • tampering with your files/mail
  • get encrypted passwords of other users
  • gather information about OCCS and the network around it to try to gain access to other machines.

    even if you really don't care about your files or account, you should take precautions with your account so that the machine and network are at less risk from inside hackers--these are the responsibilites of having an account on OCCS.

    Solution:

    There are multiple means of accessing OCCS via secure, encrypted channels.
    Secure Shell (ssh) is the only means of logging into OCCS for an interactive shell.
    For remote file transfering, Secure FTP (SFTP) is available, as well as Secure Copying (scp).
    For remote mail access both POP3 and IMAP are available over SSL encryptions.
    Also web-based mail is available over a secure web server at https://occs.cs .oberlin.edu/mail
    These secure methods of accessing OCCS are the recommended ones, and may soon be the only methods of access.

    SSH client software:

    Secure File Copying / Secure FTP ing:

    Secure remote e-mail reading (IMAP/POP3 over SSL):

    Further Reading:





    Comments? Questions? jpk@cs.oberlin.edu