Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a Windows (8 Consumer Preview) PC and a Macbook (OS X Lion). Sometimes, I'd want to pause working on a project leave my Windows PC at my room connected to my college's intranet, and keep working somewhere else (in the campus) with the same files, and I don't want the hassle of carrying a USB/uploading to FTP/waiting Dropbox to sync big files etc. so I just want direct access to my project files over the network. However, I'm concerned about the safety of this approach. I've set the sharing settings to my workspace's directory such as: my own account (that I use to log onto my PC) has full access to the files, and I've removed all the permissions (including list dir and read) from the Everyone "user". I can SMB-connect to my PC over the network successfully with my PC credentials and it works perfectly, but is my data (including BOTH my files and my credentials) safe from eavesdropping. The network is completely unsecure (unsecured regular WiFi, just as in a coffee shop) and I need to rely on the safety at a higher layer. Is there any? If not, are there any alternatives (given my requirement previously)?

Thanks, Can.

share|improve this question

1 Answer 1

up vote 4 down vote accepted

The LM and NTLM algorithms have been broken many times. Only NTLMv2 (if the server enforces its usage) is strong enough against casual sniffers, but it can be broken quickly by a bruteforce attack.

However, regardless of which authentication method you use, the SMB protocol doesn't support encryption and will transfer your files in plain text, so it is not recommended to use over public Internet except through a VPN.

An alternative is SFTP, the SSH file transfer protocol. There are several SSH servers for Windows (I prefer Bitvise WinSSHd), and many SFTP clients for both Windows (WinSCP) and OS X (if I recall correctly – Transmit, Cyberduck, OSXFUSE).

share|improve this answer
    
For me, SFTP has also been much faster than SMB; transferring files at 7 MB/s over 100Mbit LAN while SMB could only reach 2 MB/s. (I could not test with Win7/8, however, which support an allegedly much improved SMBv2 protocol.) –  grawity Jun 13 '12 at 21:02
    
Not enough to to write up a full answer but I also wanted to mention FTPS (Ftp over SSL) This is implemented in FileZilla and I am sure many others. –  Scott Chamberlain Jun 13 '12 at 21:02
    
@ScottChamberlain: True, but unfortunately FTPS shares the downsides of both FTP and SSL, making it rather inconvenient for a NATed personal server. FTP requires forwarding several ports for the data connections; smart routers can do that automatically, but not when the connection is encrypted. At the same time, the security of SSL greatly depends on how the server certificate is verified, since a home PC will probably use a self-signed cert... –  grawity Jun 13 '12 at 21:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.