@Scissors said in WebMU still in use?:
Oh well, I spoke too soon. Even though I could connect via Mushclient on a USB stick, it's still constantly disconnecting me. It looks like the corporate firewall is set to periodically shutdown telnet connections everywhere, so I may be SOL.
IT guy here. PLEASE read this.
Telnet (port23) is a hideously insecure protocol that transmits everything in clear text. Most companies these days outright block all telnet traffic to ensure that private information isn't at risk of snooping. Nothing is encrypted in telnet. Everything (everything) is readable like a keylogger: transmission of userid/password, every incoming/outgoing message, your RP, etc.
WHY PEOPLE WHO MU FROM WORK SHOULD BE CONCERNED ABOUT THIS
- ALL of your transmissions via telnet are subject to capture and review by any modern information security software and/or firewalls
- If you're roleplaying stuff your tech-savvy spouse wouldn't want to see, it's easy to implement a firewall to log all traffic via telnet
- ITSecOps software often will flag or alert to attempts to circumvent security settings and most corporate acceptable use policies would consider connecting to a MU (or using an outside device like a thumb drive to use a company pc to connect to MUs) as a fireable offense. Using a thumb drive to get around security rules is technically in the same category as using a thumb drive to introduce a virus (intentionally or accidentally), which is why there are so many rules for connecting outside devices to company property.
- If you've TSed over a MU using telnet and using a company laptop/network? Best of luck to you. Your TS is readable by Information Security.
HOW TO GET AROUND THIS
- on your private device/laptop you could use a VPN to encrypt your traffic on the machine, but since it's telnet (and telnet cannot be encrypted) the telnet traffic from that endpoint to the MU is clear text
- While at work use a personal cell phone not connected to company WiFi (use your cellular connection) to MU.
- If your MU has paid a certificate authority for SSH encrypted communication, you should always use SSH. This is a bit of a stretch as I don't know of any games that have paid for this as an option. SSH is an upgrade from telnet that allows for encryption.
...in short. You're taking your life into your own hands when using company resources (internet connection, wifi, company issued device) to MU. You're making it even worse if you're TSing or doing anything that HR would frown upon.
I know of one person who was fired at my last job for attempting to MU from work. EVEN IF YOUR BOSS SAYS IT IS OKAY, your transmitted content (or attempts to circumvent existing security) are subject to company policies. It's kind of like if your boss says it's okay that you use YouTube during the day they're expecting music videos, audio books, and sports clips, but if you start watching sex scenes on YouTube with nudity you could still get in trouble.