You are not logged in. Login Now
 0-4   5-29   30-48        
 
Author Message
krj
Time to terminate "telnet-through"? Mark Unseen   Jun 28 17:36 UTC 2000

In the June meeting minutes, eeyore wrote:
 
> Right now we are having about 30-40
>       credit cards declined every month. 

This is entirely speculative on my part, but:
 
1)  This is possibly a majority of our credit card transactions.
2)  My guess is that the companies may not like Grex having such 
    a high percentage of rejected credit cards.  Even if the 
    card firms don't get upset with us, it's wasted work for the 
    treasurer.
3)  My belief is that this is bad guys seeking to telnet into Grex
    and then telnet out again to do harm to other systems.
 
I suggest that it may now be time to end "telnet-through,"
allowing users who telnet into Grex to telnet out again.
My thought is that this would reduce the incentive for people to 
try to scam Grex with bad credit cards.

I do not suggest restricting telnet availability for connections
which originate on the local dial-ins.

But telnet-through has little real benefit -- if any -- for legitimate
users.  Anyone who is telnetting to Grex, then telnetting elsewhere, 
should just be able to go to their final destination directly.
48 responses total.
krj
response 1 of 48: Mark Unseen   Jun 28 17:40 UTC 2000

(What if it's not telnet that is the lure for the bad credit card 
attempts?  What if it's IRC?  But my own observation from party is that 
the floundering wannabe vandals are looking to telnet out to other 
systems more than they are looking for IRC.)
jp2
response 2 of 48: Mark Unseen   Jun 28 17:47 UTC 2000

This response has been erased.

jared
response 3 of 48: Mark Unseen   Jun 28 17:50 UTC 2000

There are numerous systems that allow free access to telnet out,
but i'm not sure that you are wrong either, Ken.

I would be interested in a more detailed look into if it is the card owners
that are just over their limit, or why they are signing up for
a membership.

perhaps a survey when you pay via cc that says:
why are you becoming a member of grex:
a) support conferencing system
b) use internet connection (eggdrop, irc, telnet, ssh)
c) email access

etc..
aruba
response 4 of 48: Mark Unseen   Jun 28 17:52 UTC 2000

I wonder how often members use this.  I know of one who became a member just
so he could telnet to MSU and get his mail; it has worked well for him.  Is
there a log which says how often members telnet out?
 0-4   5-29   30-48        
Response Not Possible: You are Not Logged In
 

- Backtalk version 1.3.30 - Copyright 1996-2006, Jan Wolter and Steve Weiss