Solved

Tera term and xyzmodem

Posted on 2002-05-14
14
920 Views
Last Modified: 2012-05-04
Hello experts:

I ran into a site which gives me some space but requires that I upload/download files using tools such as "tera term" and use xyzmodem protocols.

My questions are:
1) Why does that site do this? Is it for security purposes? Why using xyz protocols will be more secure than using ftp to upload/download?

2) "tera term" only works on Windows platforms. Any similar tools available under Linux?

Your help will be very much appreciated.

KEN
0
Comment
Question by:ken021600
  • 7
  • 7
14 Comments
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
1) ask the site's provider ;-)
2) minicom
0
 

Author Comment

by:ken021600
Comment Utility
Well, I just took a look at your profile and found that you are a UNIX/Linux guru.

I was wondering if you could be a bit more specific and shout out some more comments? If something exists, there must be some reasons for its existance. That site wants people to use tera term and xyzmodem to upload/download files, so i'd reckon there must be some specific reasons...

Your reply will be aprreciated.
KEN
0
 
LVL 51

Accepted Solution

by:
ahoffmann earned 100 total points
Comment Utility
well, I don't know why they recommend TeraTerm (I would do also;-)
Probably 'cause it's free, and works like a charme since years, there is also a ssh version /ttssh.exe). TeraTerm behaves like a xterm on UNIX (Copy&Paste, etc.), that's why I use it.
It also supports the ancient xyzmodem protocols (don't know if there is any body still using this).

That's all I know about (plus: no SSH Protocol Version 2 support, no scp support, highly customizable with built in macro language), I'm a UNIX man :-))
0
 

Author Comment

by:ken021600
Comment Utility
Thanks for your help.

anyway, i'm more interested in why they insist using the old xyzmodem protocol. Their policy is, if i pay them $36 i'll become a "special" member and can upload/download files using ftp; if i don't pay the money i will be a free member and can upload/download using xyzmodem only. so i think they are trying to protect themselves by specifying different protocols used by different members...

so could you tell me if it is more secure to upload/download files using xyzmodem rather than using ftp?

KEN
0
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
> .. if it is more secure ..
depends on your requirements of security.

With ftp everythings goes plain text through internet, including password.
When using xyzmodem, data goes plain text (probably compressed) too.
IMO the security risk is the same.
If you want security, go with ssh (TeraTerm still supports this).
0
 

Author Comment

by:ken021600
Comment Utility
Well, the following is what i got from that site(part of its FAQ):15) WHY CAN'T I USE FTP TO TRANSFER MY FILES?

  FTP (File Transfer Protocol) is a simple and easy way to transfer
  (upload/download) many different file types via the ARPANET.  On
  CHAOSNET, NFILE is superior to both FTP and NFS for sharing files.

  Shortly, the reason why on ARPA members can use FTP to transfer
  files to and from SDF is due to the following two incidents:

  In June of 2000 I was contacted by the FBI office in Boston.  A
  person from Romania was systematically shuting down various machines
  on the East Coast of the US by first logging into them using
  compromised (stolen) login accounts through various network (to
  convolude his true origin).  He would then open an FTP connection to
  SDF and transfer the 'rootkit' distribution to that victim system
  and proceed to gain administrator access to destroy that system.

  Its very unfortunate that a system like SDF based on public trust
  is forced to only allow FTP transfers for 'trusted' (ARPA) members.
  The said user above never even used SDF for anything other than
  his illegal and malicious activities on those private systems.

  A slower, but still acceptable method of sending/receiving files
  from SDF can be found with the XYZMODEM tools.  Infact, SDF used
  XYZMODEM for file transfers before we installed FTP.  If you don't
  know about XYZMODEM, these are a protocol set for transfering files
  over a dialup modem connection.  Some TELNET programmes such as
  TERATERM support these protocols.

  Examples
  --------

  Uploading a file to SDF:

  1. Tell SDF you want to send a file:

  $ rz

  2. Start the file transfer from your TERMINAL.

  Downloading a file from SDF:

  1. Tell SDF which files you want to download:

  $ sz filename

  Usually (with ZMODEM) your TERMINAL will automatically respond by
  initiating a file transfer session.

  We recommend using ZMODEM as it seems to be the fastest and most
  reliable method.  You can use "sb/rb - YMODEM or sx/rb - XMODEM"
  if ZMODEM doesn't seem to work for you.


so it seems that they claim using ftp is less secure than xyzmodem... any comments?

Thanks,
KEN

0
 

Author Comment

by:ken021600
Comment Utility
Could you please give me an answer?

Thanks a lot,
KEN
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Author Comment

by:ken021600
Comment Utility
hellooooooooo, are you there?

I'll finalize this question if you could say a bit more...

Thanks,
KEN
0
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
cannot comment these statements, 'cause I never digged deeper into security issues of xyzmodem protocol. Sorry.
0
 

Author Comment

by:ken021600
Comment Utility
Well......

Can i just ask you one or two simple UNIX questions instead and give you my points? coz otherwise you'll just leave halfway in the sky...

Thanks,
KEN
0
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
.. flying in the sky, not too bad ;-)

Anyway, I tried my best. If you did not get an sufficient answer, close this question and support @ EE will refunde the points.

Feel free to ask more questions ..
0
 

Author Comment

by:ken021600
Comment Utility
Well, that's OK.

I'll just give you those points and an A, as you have "tried your best".

just one more thing: next time when you see my question posted(coz i will ask some Unix/Linux questions in the near future), please "recognize" me as one of your "old friends" and give me a priority help. :) Is that possible?

Thanks again,
KEN
0
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
> .. is that possible?
I'll try, if I'm online and faster than other experts ..
0
 
LVL 51

Expert Comment

by:ahoffmann
Comment Utility
Thanks.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

If you have a server on collocation with the super-fast CPU, that doesn't mean that you get it running at full power. Here is a preamble. When doing inventory of Linux servers, that I'm administering, I've found that some of them are running on l…
You ever wonder how to backup Linux system files just like Windows System Restore?  Well you can use Timeshift in Linux to perform those similar action.  This tutorial will show you how to backup your system files and keep regular intervals. Note…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now