TweetFollow Us on Twitter

Secure File Transfers With Fugu

Volume Number: 19 (2003)
Issue Number: 7
Column Tag: Reviews

Secure File Transfers With Fugu

Review and how to for Fugu

by Brian Shin

Your Last bite?

Anybody who speaks Japanese would recognize fugu as the diodon holocanthus, the poisonous blowfish. This delicacy, popular in Japan and the Philippines, contains a poison called tetrodotoxin, 1200 times deadlier than cyanide. Of course this has nothing to do with our Fugu, a wonderful graphical interface to secure file transfer (SFTP) and secure copy (SCP). Fugu's home page is http://rsug.itd.umich.edu/software/fugu/. Fugu is freeware and can be downloaded from http://rsug.itd.umich.edu/software/fugu/download.html.

Prying Eyes

Our non-toxic Fugu allows us to transfer files with the same ease of use of Fetch but retains the security of command line SFTP and SCP. Regular FTP sends the user name and password in clear text. This means anybody who can sniff your Ethernet packets, can get your user name and password. Using Etherpeek(TM) and a shareware hex editor, I was able to sniff out my own FTP user and password in just a few minutes;

User;
\.USER jlpi
card.  5C 01 55 
53 45 52 20 6A 6
C 70 69 63 61 72
 64 0D.  .....
Password;
].PASS ent
erpris  5D 0E 50
 41 53 53 20 65 
6E 74 65 72 70 7
2 69 73.  e.....

As you can see, the hex editor allows me to read the user name "jlpicard" and the password "enterprise". With FTP this easy to hack, you can see why it is important to use SFTP and SCP. Running the same test using Fugu rendered the encrypted user and password completely inaccessible and protected from prying eyes.

Keep the Door Closed

Another benefit from using Fugu is not having to use port 21 (FTP), one of the most common ports used for hacking. Port 21 is subject to constant attack from hackers on the internet. Fugu uses port 22 instead of port 21. This allows you to turn off your FTP servers and close port 21. A search on Google for FTP hacks will leave you stunned as to what hackers are doing with FTP and port 21.

Making the Connection

Servers you connect to need to have SSHD running. In OS X, getting SSHD running is as easy as going into System Preferences, select the Share pane, select the services tab, and turning on Remote Login. For OS X server, you can configure this in the server admin utility. If you are on a different server, go to http://www.openssh.org/ for the installer.

Making the connection with Fugu is as easy as it gets:


Figure 1. Connecting to a server with Fugu is as simple as entering the IP address and user name.


Figure 2. Type in the password and press Authenticate.


Figure 3. After you authenticate, Fugu will take you to the users home directory.

Once connected to the server, Fugu behaves like just about any other FTP client. The only exception is folder copying. According to the documentation, SFTP does not support folder copying. Fugu circumvents this by turning the folder copy attempt from SFTP into a SCP. Fugu will also ask you to re-authenticate the copy. This works fine but it will not retain the directory information of the copy. For example, you need to copy the directory ../stuff to your computer at ../Desktop/stuff. The contents of../stuff on the remote computer will all be dumped to ../Desktop.

Connect with SFTP

Under the SFTP menu you can get info on files and folders on your system and the remote computer. If you open the console window, you can see command line equivalents to your graphical work and enter direct commands. Notice of all the keyboard commands in the SFTP menu. They make navigation between remote and local directories and panes quick and painless.

Connect with SCP

SCP transfers work differently than SFTP. Rather than moving files back and forth between computers, SCP transfers 1 file or a directory at a time.

Connections are similar to SFTP but you need the name of the file you want to send or get before-hand.


Figure 4. Enter file, upload/download, user id and path.

After you enter this information, a new window will appear to enter the password. If the upload/download transfers correctly Fugu will give you the following message;


Figure 5. Copy to server successful with option for more transfers.

No safe harbor for your ship?

Now, what happens if you need to connect to a FTP server that does not use SFTP or SCP? You can create a SSH tunnel to protect yourself. From the SSH menu, select new SSH tunnel or press command-T.


Figure 6. New SSH Tunnel window.

Enter the remote host and tunnel host IP numbers. The remote port is usually port 21 and the local port can be any port greater than 1024. Enter your user name for SSH; the port is optional. You will be prompted for your password after you hit the start tunnel button.

Now that your tunnel is up, your FTP connection will be redirected securely through your tunnel host to the FTP server.

Must have program

Fugu is the kind of application that makes OS X so wonderful. It provides a graphical front end to powerful Unix command line tools. The console window gives the user the best of both worlds by allowing users to see what the graphical front is doing and giving the users an opportunity to type in your own commands.

Keyboard lovers will be pleased that every feature you can access with your mouse has a keyboard equivalent. The keyboard shortcuts are listed with every pull down menu. A comprehensive list of them is available from the help menu.

Installation of Fugu simple, and problem free. The user manual explains features in detail, and provides screen shots of how to use each feature. The manual also has extensive version history and a decent FAQ section.

The source code to Fugu is publicly available and there are German, Dutch, and Japanese localizations. French, Spanish, and Russian are on the way. With publicly available source code, localizations, Fort Knox security, great ease of use, a well-written manual, and top it off with a total cost of free makes Fugu THE essential tool for sharing files over the internet that no user should go without.


Brian Shin once worked for us at MacTech, but moved on to run his own company, providing accounting software solutions to Mac run businesses. Between SCUBA dives, he also provides consulting and other programming services. You can reach him at brian@prometheia.com.

 
AAPL
$98.38
Apple Inc.
-0.64
MSFT
$43.89
Microsoft Corpora
-0.09
GOOG
$585.61
Google Inc.
-4.99

MacTech Search:
Community Search:

Software Updates via MacUpdate

Drive Genius 3.2.4 - Powerful system uti...
Drive Genius is an OS X utility designed to provide unsurpassed storage management. Featuring an easy-to-use interface, Drive Genius is packed with powerful tools such as a drive optimizer, a... Read more
Vitamin-R 2.15 - Personal productivity t...
Vitamin-R creates the optimal conditions for your brain to work at its best by structuring your work into short bursts of distraction-free, highly focused activity alternating with opportunities for... Read more
Toast Titanium 12.0 - The ultimate media...
Toast Titanium goes way beyond the very basic burning in the Mac OS and iLife software, and sets the standard for burning CDs, DVDs, and now Blu-ray discs on the Mac. Create superior sounding audio... Read more
OS X Yosemite Wallpaper 1.0 - Desktop im...
OS X Yosemite Wallpaper is the gorgeous new background image for Apple's upcoming OS X 10.10 Yosemite. This wallpaper is available for all screen resolutions with a source file that measures 5,418... Read more
Acorn 4.4 - Bitmap image editor. (Demo)
Acorn is a new image editor built with one goal in mind - simplicity. Fast, easy, and fluid, Acorn provides the options you'll need without any overhead. Acorn feels right, and won't drain your bank... Read more
Bartender 1.2.20 - Organize your menu ba...
Bartender lets you organize your menu bar apps. Features: Lets you tidy your menu bar apps how you want. See your menu bar apps when you want. Hide the apps you need to run, but do not need to... Read more
TotalFinder 1.6.2 - Adds tabs, hotkeys,...
TotalFinder is a universally acclaimed navigational companion for your Mac. Enhance your Mac's Finder with features so smart and convenient, you won't believe you ever lived without them. Tab-based... Read more
Vienna 3.0.0 RC 2 :be5265e: - RSS and At...
Vienna is a freeware and Open-Source RSS/Atom newsreader with article storage and management via a SQLite database, written in Objective-C and Cocoa, for the OS X operating system. It provides... Read more
VLC Media Player 2.1.5 - Popular multime...
VLC Media Player is a highly portable multimedia player for various audio and video formats (MPEG-1, MPEG-2, MPEG-4, DivX, MP3, OGG, ...) as well as DVDs, VCDs, and various streaming protocols. It... Read more
Default Folder X 4.6.7 - Enhances Open a...
Default Folder X attaches a toolbar to the right side of the Open and Save dialogs in any OS X-native application. The toolbar gives you fast access to various folders and commands. You just click... Read more

Latest Forum Discussions

See All

Note Review
Note Review By Jennifer Allen on July 29th, 2014 Our Rating: :: TOO SIMPLEiPhone App - Designed for the iPhone, compatible with the iPad Note is a note taking app that’s a little too short on features to be worth its asking price... | Read more »
Chainsaw Warrior Goes on Sale & Ther...
Chainsaw Warrior Goes on Sale & There’s a Chance to Win a Copy of the Original Board Game Posted by Jennifer Allen on July 29th, 2014 [ permalink | Read more »
It Came From Canada: Tiny Tower Vegas
If you go to a casino, you might make a lot of money. If you run a casino, you’re guaranteed to make a lot of money. The choice seems pretty obvious. So while waiting for your shady real estate deals to move forward, get prepared with Tiny Tower... | Read more »
Z Hunter Review
Z Hunter Review By Lee Hamlet on July 29th, 2014 Our Rating: :: RIGHT ON TARGETUniversal App - Designed for iPhone and iPad While it might not necessarily break new ground, Z Hunter has enough tricks up its sleeve to ensure that... | Read more »
Huge Update Comes To Duet, Adding 48 New...
Huge Update Comes To Duet, Adding 48 New Stages Posted by Jennifer Allen on July 29th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Sharknado: The Video Game Available Now....
Sharknado: The Video Game Available Now. Seriously. Posted by Rob Rich on July 29th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Frog Orbs 2 Review
Frog Orbs 2 Review By Nadia Oxford on July 29th, 2014 Our Rating: :: THIS MAGIC IS A TAD MONOTONOUS Universal App - Designed for iPhone and iPad Frog Orbs 2 is repetitive, but younger players should enjoy it nonetheless.   | Read more »
Puzzix Review
Puzzix Review By Jennifer Allen on July 29th, 2014 Our Rating: :: NICE IDEAUniversal App - Designed for iPhone and iPad A little like Tetris, Puzzix is all about piecing together blocks and watching them vanish. It could do with... | Read more »
Cannonball eMail is Now Live – Works Wit...
Cannonball eMail is Now Live – Works With Gmail, Yahoo, Outlook, Hotmail, and AOL Posted by Jessica Fisher on July 29th, 2014 [ permalink ] | Read more »
To The End Review
To The End Review By Lee Hamlet on July 29th, 2014 Our Rating: :: A VICIOUS CYCLEUniversal App - Designed for iPhone and iPad To The End will test players’ patience, timing, and dedication as they try to navigate all 13 levels in... | Read more »

Price Scanner via MacPrices.net

Up to $250 price drop on leftover 15-inch Mac...
B&H Photo has dropped prices on 2013 15″ Retina MacBook Pros by as much as $250 off original MSRP. Shipping is free, and B&H charges NY sales tax only: - 15″ 2.3GHz Retina MacBook Pro: $2349... Read more
Updated MacBook Pro Price Trackers
We’ve updated our MacBook Pro Price Trackers with the latest information on prices, bundles, and availability on the new 2014 models from Apple’s authorized internet/catalog resellers as well as... Read more
Apple updates MacBook Pros with slightly fast...
Apple updated 13″ and 15″ Retina MacBook Pros today with slightly faster Haswell processors. 13″ models now ship with 8GB of RAM standard, while 15″ MacBook Pros ship with 16GB across the board. Most... Read more
Apple drops price on 13″ 2.5GHz MacBook Pro b...
The Apple Store has dropped their price for the 13″ 2.5GHz MacBook Pro by $100 to $1099 including free shipping. Read more
Apple drops prices on refurbished 2013 MacBoo...
The Apple Store has dropped prices on Apple Certified Refurbished 13″ and 15″ 2013 MacBook Pros, with model now available starting at $929. Apple’s one-year warranty is standard, and shipping is free... Read more
iOS 8 and OS X 10.10 To Support DuckDuckGo As...
Writing for Quartz, Dan Frommer reports that Apple’s forthcoming iOS 8 and OS X 10.10 operating systems version updates will allow users to select DuckDuckGo as their default search engine. He notes... Read more
U.K. Hospital Using iPods and iPads To Record...
British news journal GazetteLive’s. Ian McNeal notes that the old “an apple a day keeps the doctor away” proverb is being turned on its head at http://southtees.nhs.uk/hospitals/james-cook/ James... Read more
13-inch 2.5GHz MacBook Pro on sale for $1099,...
Best Buy has the 13″ 2.5GHz MacBook Pro available for $1099.99 on their online store. Choose free shipping or free instant local store pickup (if available). Their price is $100 off MSRP. Price is... Read more
Roundup of Apple refurbished MacBook Pros, th...
The Apple Store has Apple Certified Refurbished 13″ and 15″ MacBook Pros available for up to $400 off the cost of new models. Apple’s one-year warranty is standard, and shipping is free. Their prices... Read more
Record Mac Shipments In Q2/14 Confound Analys...
A Seeking Alpha Trefis commentary notes that Apple’s fiscal Q3 2014 results released July 22, beat market predictions on earnings, although revenues were slightly lower than anticipated. Apple’s Mac’... Read more

Jobs Board

Sr Software Lead Engineer, *Apple* Online S...
Sr Software Lead Engineer, Apple Online Store Publishing Systems Keywords: Company: Apple Job Code: E3PCAK8MgYYkw Location (City or ZIP): Santa Clara Status: Full Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Sr. Product Leader, *Apple* Store Apps - Ap...
**Job Summary** Imagine what you could do here. At Apple , great ideas have a way of becoming great products, services, and customer experiences very quickly. Bring Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.