Quick links: [ Windows SSH PuTTY package | SRCF Java SSH client webpage | SRCF ajax terminal ]
Interactive access to the SRCF machine is normally done over a series of networks (e.g., a College network, the University's network, then CUSU's network, where the server resides). It is possible to intercept data travelling over a network and examine it or tamper with it. There is a small risk that someone could intercept data users send to the SRCF server, and if that data includes a user's password, then the "attacker" can gain access to the SRCF machine, appearing to be that user -- the typical case is where the "attacker" breaks into a machine connected to a network, and uses it to listen to the network so as to intercept passwords, then uses these passwords for further breakins. The SRCF wishes to minimise this risk for its users.
Network interception of passwords and other potentially confidential data can be rendered infeasible by the use of encryption. Some access software which is used to connect to the SRCF will encrypt data sent over the network. The SRCF encourages all users to choose such software over non-encrypting alternatives.
|Encrypting ("secure")||Non-encrypting ("insecure")|
The University Computing Service also strongly recommend SSH over Telnet for remote logins to systems within the University as insecure user logins can put the whole system at risk. If you aren't running a Windows system and want to get an SSH client, the computing service issue an SSH CD (for free) which contains SSH clients for many platforms. If you are running a Windows system, it's probably easiest to download the preconfigured set from here.
Getting the software
WindowsWindows users may use PuTTY to access the SRCF service.
Information about how to upload your webpages without exposing your password to potential attackers can be found in our FAQ.
Linux / UNIXMost Linux and UNIX systems have ssh installed on them. Ask your local sysadmin if just typing `ssh email@example.com' doesn't do the right thing.
Fugu is a nice SFTP client for MacOS X
Particularly useful in cybercafes where new software is difficult or infeasible to install, MindTerm is a small programme which a web browser may download. It is a Java applet, and as such runs inside the browser, with permission to connect back to the webserver over the network.
Luckily, the SRCF webserver and the SRCF interactive login service are both currently hosted on the same machine. This is in the process of being resolved -- we ideally want role addresses, so "ssh www.srcf.net" should be wrong, and we want "ssh shell.srcf.net".SRCF MindTerm page