SSH Security

Discussion in 'Site & Server Administration' started by rm5b, Nov 10, 2007.

  1. #1
    Hi,


    When I log into my server with SSH, does the root user, or the server owner see my password? Could they have installed some sort of script or the sort to see what password I typed in?



    Thank you
     
    rm5b, Nov 10, 2007 IP
  2. ray9

    ray9 Guest

    Messages:
    69
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #2
    usually they don't see the password. But since its their server they can install a key logger, which may log your password.
     
    ray9, Nov 10, 2007 IP
  3. harrysmith

    harrysmith Well-Known Member

    Messages:
    466
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    110
    #3
    In this case you will have to trust your server owner as you are hiring their server and they have root access to your server, better try to get your own hardware and co-locate to ensure total security and privacy.
    Your host know everything what you do on your server....:D
     
    harrysmith, Nov 11, 2007 IP
  4. chickens

    chickens Peon

    Messages:
    242
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    0
    #4
    The actual answer to your question is no, they can not see your password via SSH. It is a secured protocol and they can not get your password that way.

    If they do have root access to the server then you are already compromised. Your password is saved locally to the machine and they can crack it if they really cared enough. If they do have root access then they really do not have the need to crack your password as they already have full access to anything on your hosting account.
     
    chickens, Nov 11, 2007 IP
  5. inworx

    inworx Peon

    Messages:
    4,860
    Likes Received:
    201
    Best Answers:
    0
    Trophy Points:
    0
    #5
    NO, passwords cannot be accesed this way. They're saved in an algo, which needs some knowledge in compilation f Linux as well. And you're saying they're root users and you aren't, then you need not to worry about it since they can do anything with their account, which even you cannot do :)
     
    inworx, Nov 11, 2007 IP
  6. kmap

    kmap Well-Known Member

    Messages:
    2,215
    Likes Received:
    29
    Best Answers:
    2
    Trophy Points:
    135
    #6
    yes even you can not see your root password if you wont,It can only be changed

    Regards

    Alex
     
    kmap, Nov 11, 2007 IP