Stronger encryption of stored FTP connections

Here you can propose new features, make suggestions etc.

Moderators: Hacker, petermad, Stefan2, white

Post Reply
w3net
New Member
New Member
Posts: 1
Joined: 2007-09-06, 07:52 UTC
Contact:

Stronger encryption of stored FTP connections

Post by *w3net »

I really would like TC to encrypt my FTP passwords with a much more stronger encryption algorithm. Lots of people store their FTP connections but this is VERY DANGEROUS! The encryption is very weak it can be decrypted too easily. Please consider my suggestion as more and more viruses/trojans exploit this and steal passwords from the ftp settings file wcx_ftp.ini.

For instance there is a trojan virus that infects web sites. Once you visit such an infected web site, your computer might be infected (depends on the browser version and operating system). For more information see:
w3net.eu/?p=46
User avatar
m^2
Power Member
Power Member
Posts: 1413
Joined: 2006-07-12, 10:02 UTC
Location: Poland
Contact:

Post by *m^2 »

It's planned for a future release. Search.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50475
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Yes, it's planned, but it will require that the user enters a master password. Why? If Total Commander could decrypt it without asking for a password, then ANY other program could do that too! Btw, Firefox and Internet Explorer do the same as Total Commander, they allow to store your passwords without asking for a master password! There are programs to decrypt these browser passwords out there, so Total Commander is currently not less safe than these browsers.

Once you have a troyan on your PC, it can do almost ANYTHING, even watch the key presses when you type your password (or even master password).
Author of Total Commander
https://www.ghisler.com
golovan
Junior Member
Junior Member
Posts: 15
Joined: 2007-09-09, 04:47 UTC

Post by *golovan »

ghisler(Author) wrote:but it will require that the user enters a master password.
This is exactly what you should do!! This is just MUST HAVE feature. All years I am using TC I worried about FTP passwords and some 'nice' day that happened. All my customers' servers were hacked by fucking russian virus. My F-Secure AV did not help me. I just got trojan from some website. So now I moved to Kaspersky (forewer) and flashfxp (I hope, temporary).. flashfxp is only software I found which uses master pwd to secure this info..

Please please I hate all others programs to work with ftp.. once that feature will be developed I order one more copy of your cool software.. I promise :)
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50475
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Have you tried the PassStore plugin?
http://www.totalcmd.net/plugring/Pass_Store.html
Author of Total Commander
https://www.ghisler.com
yeskky
Member
Member
Posts: 177
Joined: 2007-03-01, 05:32 UTC
Location: Jiang Su,China

Post by *yeskky »

2golovan

Ftprush is better than flashfxp and it uses master password, too. 8)
User avatar
PeaceMaker
Senior Member
Senior Member
Posts: 287
Joined: 2005-12-31, 22:32 UTC
Location: Warsaw, Poland
Contact:

Post by *PeaceMaker »

golovan wrote:This is just MUST HAVE feature. All years I am using TC I worried about FTP passwords and some 'nice' day that happened.
I also store many important FTP passwords in Total Commander (and using them almost every day), so possibility of having stronger encryption (like "master password" feature) would be great! Meanwhile I'm using "PassStore" plugin, which Mr Ghisler proposed in a previous post - it's better than wcx_ftp.ini :wink:
[face=tahoma]LICENSE NUMBER: #101897 Single user license (since: 6th February 2004)
CURRENT VERSION: Total Commander 9.00 beta 12 (released: 31st August 2016)
[/face]
User avatar
WatchUer
Senior Member
Senior Member
Posts: 243
Joined: 2003-02-22, 10:46 UTC
Location: China

Post by *WatchUer »

yeskky wrote:2golovan

Ftprush is better than flashfxp and it uses master password, too. 8)
Yes, I agree, it's stable and more powerful, more flexible. :)
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 50475
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Yes, it's planned, but I fear that not many people will really use it. Just a small question: Who is using a master password in Firefox for the Web logins?
Author of Total Commander
https://www.ghisler.com
User avatar
SanskritFritz
Power Member
Power Member
Posts: 3693
Joined: 2003-07-24, 09:25 UTC
Location: Budapest, Hungary

Post by *SanskritFritz »

2ghisler(Author)
Well, Firefox is one thing, company ftp passwords another...
I switched to Linux, bye and thanks for all the fish!
User avatar
roentgen
Power Member
Power Member
Posts: 757
Joined: 2005-12-03, 19:58 UTC

Post by *roentgen »

2ghisler(Author)
Who is using a master password
I do (in Opera). While it doesn't rule out hacking it does prevent casual stealing.
TC for Linux please!
User avatar
Hacker
Moderator
Moderator
Posts: 13142
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Post by *Hacker »

Christian,
Just a small question: Who is using a master password in Firefox for the Web logins?
I do.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
Post Reply