A telnet exploit via Curl was reported recently https://curl.se/docs/CVE-2023-27533.html.
I am relatively new to running a Mesh server (on a hAPlite). I noticed that Telnet is ON by default. I've always been told that would be a security hole.
Would it make sense to make the default be OFF?
I am relatively new to running a Mesh server (on a hAPlite). I noticed that Telnet is ON by default. I've always been told that would be a security hole.
Would it make sense to make the default be OFF?
Frequently when the AREDN code gets all tangled up (which isn't all that often anymore), the ssh daemon crashes. But if telnet is enabled, it frequently stays running, so is available for access and subsequent troubleshooting.
Orv W6BI