Re: [Savannah-hackers-public] sftp

[Bob Proulx]

Hello Denis,

Sorry for the delays in responding.  Personally I have been traveling
and not had time to sit down and look at this problem.  Antonio Diaz
Diaz also raised this issue too and I had to respond the same.

Denis Kuznetsov wrote:
> I used to use sftp for this but at some point I started getting
> "Connection closed" errors. I hear this is because sftp was disabled due
> to security concerns.

Yes.  Sylvane Beucler found and reported a security vulnerability
which we needed to close and unfortunately that required disabling
sftp access.  Because we didn't have an alternative at the moment that
would allow it.

> Could you please let me know if there's a way to retain that
> functionality without using sftp? Sometimes I can upload the wrong file
> and then it sits on the remote machine and I can do nothing about it and
> so on. And generally it is much more convenient to log in to remote
> machine and do what I need to do.

This is definitely something on the todo list that we need to
understand and to address in some way.  But we just haven't had time
to actually do it.  :-(

In the meantime if you have something you need please don't hesitate
to simply ask us to do it for you.  That will be a good motivator that
we need to get this fixed up!  There are a few things like this on
Savannah already.  I am sorry but that is the best I know to offer at
this time.  But I completely agree that it needs to be addressed.  It
is no fun when you are missing necessary access.

Bob