Reputation
8,550
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 30 55
Newest
 Caucus
Impact
~677k people reached

Jun
3
comment What to use instead of FTP
@Stephane if you know of a simple way (or product) for a novice to add SFTP access on Windows servers without requiring shell access, then by all means post it as an answer. That's what we're here for, after all.
Jun
3
comment What to use instead of FTP
@MichaelHampton I don't recommend running Windows at all. Which is why this question isn't about my servers.
Jun
3
comment What to use instead of FTP
@MichaelHampton It violates the principle of least privilege and dramatically increases your attack surface and risk of escalation. Allowing flash videos to be embedded in PDF documents is theoretically safe, but it's crazy-dangerous in the real world.
Jun
3
comment What to use instead of FTP
@Stephane By "set up" I'm referring to server-side set up, not client-side. I'm intimately familiar with the protocols, having myself written implementations for many of them including WebDAV and FTP. The core of the question isn't "what should I use on my server", it's "what should I encourage beginner admins to use on their servers." SFTP very critically relies on shell access; the only way around it is to create a modified restricted shell (e.g. rssh) which pretends to be a shell but only allows you to run SFTP-related commands. This is non-trivial to set up on Windows.
Jun
3
comment What to use instead of FTP
@Stephane SFTP is perfectly reasonable if it can be done without granting shell access (which typically isn't the case). DAV is perfectly reasonable if it can be simple for a novice to set up and secure (which typically isn't the case).
Jun
3
asked What to use instead of FTP
May
31
awarded  Yearling
May
23
answered Redirect Outbound HTTP to port 53 iptables
May
23
comment How to forbid non-UTF-8 filenames?
@lvella OK, you do that.
May
22
answered How to forbid non-UTF-8 filenames?
May
22
answered Why does grepping ps [p]rocess_name exclude grep from the results
May
14
comment Extending a PaGP EtherChannel run beyond the maximum ethernet length
Maximum run length for ethernet is not a matter of signal strength, it's packet transit time. If you exceed your maximum length, then a small packet can be 100% "in flight" on the wire, and the CSMA/CD algorithm in Ethernet is built on the assumption that this will never happen. Packet-collision chaos ensues.
May
14
awarded  Caucus
Apr
30
awarded  Popular Question
Apr
22
awarded  linux
Apr
20
reviewed Reject How to install gparted on CentOS
Apr
10
awarded  Nice Answer
Mar
10
awarded  Nice Answer
Mar
4
awarded  Popular Question
Mar
1
comment What conditions trigger a table level lock
That's in interesting possibility. I don't have the captured events to tell for certain, but I see how that could be possible.