TweetFollow Us on Twitter

Secure File Transfers With Fugu

Volume Number: 19 (2003)
Issue Number: 7
Column Tag: Reviews

Secure File Transfers With Fugu

Review and how to for Fugu

by Brian Shin

Your Last bite?

Anybody who speaks Japanese would recognize fugu as the diodon holocanthus, the poisonous blowfish. This delicacy, popular in Japan and the Philippines, contains a poison called tetrodotoxin, 1200 times deadlier than cyanide. Of course this has nothing to do with our Fugu, a wonderful graphical interface to secure file transfer (SFTP) and secure copy (SCP). Fugu's home page is http://rsug.itd.umich.edu/software/fugu/. Fugu is freeware and can be downloaded from http://rsug.itd.umich.edu/software/fugu/download.html.

Prying Eyes

Our non-toxic Fugu allows us to transfer files with the same ease of use of Fetch but retains the security of command line SFTP and SCP. Regular FTP sends the user name and password in clear text. This means anybody who can sniff your Ethernet packets, can get your user name and password. Using Etherpeek(TM) and a shareware hex editor, I was able to sniff out my own FTP user and password in just a few minutes;

User;
\.USER jlpi
card.  5C 01 55 
53 45 52 20 6A 6
C 70 69 63 61 72
 64 0D.  .....
Password;
].PASS ent
erpris  5D 0E 50
 41 53 53 20 65 
6E 74 65 72 70 7
2 69 73.  e.....

As you can see, the hex editor allows me to read the user name "jlpicard" and the password "enterprise". With FTP this easy to hack, you can see why it is important to use SFTP and SCP. Running the same test using Fugu rendered the encrypted user and password completely inaccessible and protected from prying eyes.

Keep the Door Closed

Another benefit from using Fugu is not having to use port 21 (FTP), one of the most common ports used for hacking. Port 21 is subject to constant attack from hackers on the internet. Fugu uses port 22 instead of port 21. This allows you to turn off your FTP servers and close port 21. A search on Google for FTP hacks will leave you stunned as to what hackers are doing with FTP and port 21.

Making the Connection

Servers you connect to need to have SSHD running. In OS X, getting SSHD running is as easy as going into System Preferences, select the Share pane, select the services tab, and turning on Remote Login. For OS X server, you can configure this in the server admin utility. If you are on a different server, go to http://www.openssh.org/ for the installer.

Making the connection with Fugu is as easy as it gets:


Figure 1. Connecting to a server with Fugu is as simple as entering the IP address and user name.


Figure 2. Type in the password and press Authenticate.


Figure 3. After you authenticate, Fugu will take you to the users home directory.

Once connected to the server, Fugu behaves like just about any other FTP client. The only exception is folder copying. According to the documentation, SFTP does not support folder copying. Fugu circumvents this by turning the folder copy attempt from SFTP into a SCP. Fugu will also ask you to re-authenticate the copy. This works fine but it will not retain the directory information of the copy. For example, you need to copy the directory ../stuff to your computer at ../Desktop/stuff. The contents of../stuff on the remote computer will all be dumped to ../Desktop.

Connect with SFTP

Under the SFTP menu you can get info on files and folders on your system and the remote computer. If you open the console window, you can see command line equivalents to your graphical work and enter direct commands. Notice of all the keyboard commands in the SFTP menu. They make navigation between remote and local directories and panes quick and painless.

Connect with SCP

SCP transfers work differently than SFTP. Rather than moving files back and forth between computers, SCP transfers 1 file or a directory at a time.

Connections are similar to SFTP but you need the name of the file you want to send or get before-hand.


Figure 4. Enter file, upload/download, user id and path.

After you enter this information, a new window will appear to enter the password. If the upload/download transfers correctly Fugu will give you the following message;


Figure 5. Copy to server successful with option for more transfers.

No safe harbor for your ship?

Now, what happens if you need to connect to a FTP server that does not use SFTP or SCP? You can create a SSH tunnel to protect yourself. From the SSH menu, select new SSH tunnel or press command-T.


Figure 6. New SSH Tunnel window.

Enter the remote host and tunnel host IP numbers. The remote port is usually port 21 and the local port can be any port greater than 1024. Enter your user name for SSH; the port is optional. You will be prompted for your password after you hit the start tunnel button.

Now that your tunnel is up, your FTP connection will be redirected securely through your tunnel host to the FTP server.

Must have program

Fugu is the kind of application that makes OS X so wonderful. It provides a graphical front end to powerful Unix command line tools. The console window gives the user the best of both worlds by allowing users to see what the graphical front is doing and giving the users an opportunity to type in your own commands.

Keyboard lovers will be pleased that every feature you can access with your mouse has a keyboard equivalent. The keyboard shortcuts are listed with every pull down menu. A comprehensive list of them is available from the help menu.

Installation of Fugu simple, and problem free. The user manual explains features in detail, and provides screen shots of how to use each feature. The manual also has extensive version history and a decent FAQ section.

The source code to Fugu is publicly available and there are German, Dutch, and Japanese localizations. French, Spanish, and Russian are on the way. With publicly available source code, localizations, Fort Knox security, great ease of use, a well-written manual, and top it off with a total cost of free makes Fugu THE essential tool for sharing files over the internet that no user should go without.


Brian Shin once worked for us at MacTech, but moved on to run his own company, providing accounting software solutions to Mac run businesses. Between SCUBA dives, he also provides consulting and other programming services. You can reach him at brian@prometheia.com.

 
AAPL
$97.67
Apple Inc.
+0.64
MSFT
$44.50
Microsoft Corpora
+0.10
GOOG
$589.02
Google Inc.
-4.33

MacTech Search:
Community Search:

Software Updates via MacUpdate

TinkerTool 5.3 - Expanded preference set...
TinkerTool is an application that gives you access to additional preference settings Apple has built into Mac OS X. This allows to activate hidden features in the operating system and in some of the... Read more
Audio Hijack Pro 2.11.0 - Record and enh...
Audio Hijack Pro drastically changes the way you use audio on your computer, giving you the freedom to listen to audio when you want and how you want. Record and enhance any audio with Audio Hijack... Read more
Intermission 1.1.1 - Pause and rewind li...
Intermission allows you to pause and rewind live audio from any application on your Mac. Intermission will buffer up to 3 hours of audio, allowing users to skip through any assortment of audio... Read more
Autopano Giga 3.6 - Stitch multiple imag...
Autopano Giga allows you to stitch 2, 20, or 2,000 images. Version 3.0 integrates impressive new features that will definitely make you adopt Autopano Pro or Autopano Giga: Choose between 9... Read more
Airfoil 4.8.7 - Send audio from any app...
Airfoil allows you to send any audio to AirPort Express units, Apple TVs, and even other Macs and PCs, all in sync! It's your audio - everywhere. With Airfoil you can take audio from any... Read more
Microsoft Remote Desktop 8.0.8 - Connect...
With Microsoft Remote Desktop, you can connect to a remote PC and your work resources from almost anywhere. Experience the power of Windows with RemoteFX in a Remote Desktop client designed to help... Read more
xACT 2.30 - Audio compression toolkit. (...
xACT stands for X Aaudio Compression Toolkit, an application that encodes and decodes FLAC, SHN, Monkey’s Audio, TTA, Wavpack, and Apple Lossless files. It also can encode these formats to MP3, AAC... Read more
Firefox 31.0 - Fast, safe Web browser. (...
Firefox for Mac offers a fast, safe Web browsing experience. Browse quickly, securely, and effortlessly. With its industry-leading features, Firefox is the choice of Web development professionals... Read more
Little Snitch 3.3.3 - Alerts you to outg...
Little Snitch gives you control over your private outgoing data. Track background activityAs soon as your computer connects to the Internet, applications often have permission to send any... Read more
Thunderbird 31.0 - Email client from Moz...
As of July 2012, Thunderbird has transitioned to a new governance model, with new features being developed by the broader free software and open source community, and security fixes and improvements... Read more

Latest Forum Discussions

See All

Reddme for iPhone - The Reddit Client (...
Reddme for iPhone - The Reddit Client 1.0 Device: iOS iPhone Category: News Price: $.99, Version: 1.0 (iTunes) Description: Reddme for iPhone is an iOS 7-optimized Reddit client that offers a refreshing new way to experience Reddit... | Read more »
Jacob Jones and the Bigfoot Mystery : Ep...
Jacob Jones and the Bigfoot Mystery : Episode 2 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Jacob Jones is back in Episode 2 of one of Apples 'Best of 2013' games and an App Store... | Read more »
New Trailer For Outcast Odyssey, A New K...
New Trailer For Outcast Odyssey, A New Kind of Card Battler Posted by Jennifer Allen on July 25th, 2014 [ permalink ] Out this Fall is a new kind of card battle game: Outcast Odyssey. | Read more »
Garfield: Survival of the Fattest Coming...
Garfield: Survival of the Fattest Coming to iOS this Fall Posted by Jennifer Allen on July 25th, 2014 [ permalink ] Who loves lasagna? Me. Also everyone’s favorite grumpy fat cat, Garfield. | Read more »
Happy Flock Review
Happy Flock Review By Andrew Fisher on July 25th, 2014 Our Rating: :: HERD IT ALL BEFOREUniversal App - Designed for iPhone and iPad Underneath the gloss of Happy Flock’s visuals is a game of very little substance. It’s cute, but... | Read more »
Square Register Updates Adds Offline Pay...
Square Register Updates Adds Offline Payments Posted by Ellis Spice on July 25th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Looking For Group – Hearthstone’s Curse...
For the first time since its release (which has thankfully been a much shorter window for iPad players than their PC counterparts), Blizzard’s wildly successful Hearthstone: Heroes of Warcraft CCG is sporting some brand new content: the single... | Read more »
Poptile Review
Poptile Review By Jennifer Allen on July 25th, 2014 Our Rating: :: SIMPLY FUNUniversal App - Designed for iPhone and iPad Simple yet a little bit glorious, Poptile is a satisfying entertaining puzzle game with oodles of the ‘one... | Read more »
Modern Combat 5: Blackout Review
Modern Combat 5: Blackout Review By Brittany Vincent on July 25th, 2014 Our Rating: :: LESS QQ, MORE PEW PEWUniversal App - Designed for iPhone and iPad The fifth entry into the blockbuster Modern Combat series is what mobile... | Read more »
Watch and Share Mobile Gameplay Videos W...
Watch and Share Mobile Gameplay Videos With Kamcord Posted by Jennifer Allen on July 25th, 2014 [ permalink ] iPhone App - Designed for the iPhone, compatible with the iPad | Read more »

Price Scanner via MacPrices.net

Apple’s 2014 Back to School promotion: $100 g...
 Apple’s 2014 Back to School promotion includes a free $100 App Store Gift Card with the purchase of any new Mac (Mac mini excluded), or a $50 Gift Card with the purchase of an iPad or iPhone,... Read more
iMacs on sale for $150 off MSRP, $250 off for...
Best Buy has iMacs on sale for up to $160 off MSRP for a limited time. Choose free home shipping or free instant local store pickup (if available). Prices are valid for online orders only, in-store... Read more
Mac minis on sale for $100 off MSRP, starting...
Best Buy has Mac minis on sale for $100 off MSRP. Choose free shipping or free instant local store pickup. Prices are for online orders only, in-store prices may vary: 2.5GHz Mac mini: $499.99 2.3GHz... Read more
Global Tablet Market Grows 11% in Q2/14 Notwi...
Worldwide tablet sales grew 11.0 percent year over year in the second quarter of 2014, with shipments reaching 49.3 million units according to preliminary data from the International Data Corporation... Read more
New iPhone 6 Models to Have Staggered Release...
Digitimes’ Cage Chao and Steve Shen report that according to unnamed sources in Apple’s upstream iPhone supply chain, the new 5.5-inch iPhone will be released several months later than the new 4.7-... Read more
New iOS App Helps People Feel Good About thei...
Mobile shoppers looking for big savings at their favorite stores can turn to the Goodshop app, a new iOS app with the latest coupons and deals at more than 5,000 online stores. In addition to being a... Read more
Save on 5th generation refurbished iPod touch...
The Apple Store has Apple Certified Refurbished 5th generation iPod touches available starting at $149. Apple’s one-year warranty is included with each model, and shipping is free. Many, but not all... Read more
What Should Apple’s Next MacBook Priority Be;...
Stabley Times’ Phil Moore says that after expanding its iMac lineup with a new low end model, Apple’s next Mac hardware decision will be how it wants to approach expanding its MacBook lineup as well... Read more
ArtRage For iPhone Painting App Free During C...
ArtRage for iPhone is currently being offered for free (regularly $1.99) during Comic-Con San Diego #SDCC, July 24-27, in celebration of the upcoming ArtRage 4.5 and other 64-bit versions of the... Read more
With The Apple/IBM Alliance, Is The iPad Now...
Almost since the iPad was rolled out in 2010, and especially after Apple made a 128 GB storage configuration available in 2012, there’s been debate over whether the iPad is a serious tool for... Read more

Jobs Board

*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Sr Software Lead Engineer, *Apple* Online S...
Sr Software Lead Engineer, Apple Online Store Publishing Systems Keywords: Company: Apple Job Code: E3PCAK8MgYYkw Location (City or ZIP): Santa Clara Status: Full Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.