frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

The Day the Telnet Died

https://www.labs.greynoise.io/grimoire/2026-02-10-telnet-falls-silent/
60•pjf•1h ago

Comments

adolph•51m ago
The pattern points toward one or more North American Tier 1 transit providers implementing port 23 filtering
RupertSalt•18m ago
Someone attempted to compromise my home router last week using CHARGEN. Can you imagine!
iberator•46m ago
Stranger article. I wasn't able to get the main point of this article. Strangely written, but hey - I'm nob native by any means.

ps.

telnet SDF.org

just works...

RonanSoleste•44m ago
I still used telnet today (had to). Unsure of the patching here. But its definitely locked down to a subset of internal use only.
Twisol•43m ago
> Someone upstream of a significant chunk of the internet’s transit infrastructure apparently decided telnet traffic isn’t worth carrying anymore. That’s probably the right call.

Does this impact traffic for MUDs at all? I know several MUDs operate on nonstandard Telnet ports, but many still allow connection on port 23. Does this block end-to-end Telnet traffic, or does it only block attempts to access Telnet services on the backbone relays themselves?

MBCook•39m ago
It wasn’t clear from the article but I assumed they were filtering for the attack specifically.

Since Telnet is totally plain text that would absolutely be easy to do right?

wbl•38m ago
Not at interconnect speeds
Mixtape•26m ago
Wouldn't that imply that >80% of all monitored telnet sessions were exploit attempts for the specific CVE in question? Even with the scale of modern botnets, that seems unrealistic for a single vuln that was undisclosed at the time.
RupertSalt•22m ago
Most MUDs do not use Telnet.

MUDs use plaintext TCP protocols that are accessible to a wide range of clients.

The Telnet protocol is well-defined and not completely plaintext. There are in-band signaling methods and negotiations. Telnet is defined to live on 23/tcp as an IANA well-known, privileged, reserved port.

MUDs do none of this. You can usually connect to a MUD using a Telnet client, but most players hate the experience and often deride this method in favor of a dedicated, programmable client.

The fact that MUDs inhabit higher 4-digit ports is an artifact from their beginnings as unprivileged, user-run servers without a standardized protocol or an assigned “well-known port” presence. If you want your MUD to be particularly inaccessible, you could certainly run on port 23 now!

Twisol•3m ago
As a MUD enthusiast of two decades, this is not accurate. Where are you getting this information?

Most MUDs implement RFC 854, and a number of non-standard Telnet option subnegotiation protocols have been adopted for compression (MCCP2), out-of-band data transmission (ATCP, GMCP, ZMP), and even a mechanism for marking up the normal in-band content using XML-style tags out-of-band (MXP). These telopts build on the subnegotiation facility in standard Telnet, whose designers knew that the base protocol would be insufficient for many needs; there are a great number of IANA-controlled and standardized telopt codes that demonstrate this, and the MUD community has developed extensions using that same mechanism.

> You can usually connect to a MUD using a Telnet client, but most players hate the experience and often deride this method in favor of a dedicated, programmable client.

I think you are confusing "telnet" the program with "telnet" the protocol. I am speaking here of the protocol, defined at base in RFC 854, for which "telnet" the program is but one particularly common implementation. You look at any of those "dedicated, programmable clients" and they will contain an implementation of RFC 854, probably also an implementation of RFC 1143 (which nails down the rules of subnegotiation in order to prevent negotiation loops), and an implementation of the RFCs for several standard telopts as well as non-standardized MUD community telopts.

Laforet•17m ago
It seems like they are doing a port based block similar to how residential lines often have their SMTP ports shut off.

That said in this day and age, servers on the public network really ought to use SSH.

davebranton•38m ago
Why would somebody read something that somebody couldn't be bothered to write? This article is AI slop.
gerdesj•38m ago
telnet isn't just for ... telnet.

  $ telnet smtp.example.co.uk 25
  HELO me
  MAIL FROM: gerdesj@example2.co.uk
  RCPT TO: gerdesj@example.co.uk
  DATA
.. or you can use SWAKS! For some odd reason telnet is becoming rare as an installed binary.
Twisol•33m ago
The difference between "telnet" the program and "telnet" the protocol is especially important in this discussion, I think.

A more "proper" tool for that is netcat -- I doubt SMTP supports the Telnet option negotiations subsystem. (I also doubt SMTP servers can interpret the full suite of Network Virtual Terminal (NVT) commands that the Telnet protocol supports.) There's clearly enough similarity between the two protocols that if you're just using it to transfer plaintext it will probably work out fine, but they are distinct protocols.

quotemstr•25m ago
You want nc (usually with -v) or socat. telnet is muscle memory for a lot of people (myself included sometimes) but it's a strictly inferior choice these days for poking arbitrary plaintext services.
ktpsns•23m ago
I used telnet(1) as a generic TCP text client for many years before switching to GNU/BSD netcat. Nowadays, netcat is more prominent then telnet, and telnet had its corner cases with control characters.

Never heard about https://jetmore.org/john/code/swaks/, thanks for the tip.

Animats•32m ago
So eleven years ago someone put a backdoor in the Telnet daemon.

Who?

Where's the commit?

parl_match•29m ago
It wasn't a backdoor, just a very serious security bug. Congrats on jumping straight to conspiracy and paranoia, though.
alt187•13m ago
It's only a conspiracy and paranoia if it's wrong. 11 years ago was 2015.
greyface-•23m ago
https://codeberg.org/inetutils/inetutils/commit/fa3245ac8c28...
ieie3366•17m ago
That's crazy. This is core business critical software but they just YOLO critical changes without any automated tests? this PR would be insta-rejected in the small SAAS shop I work at.
avaer•5m ago
There's a famous XKCD about this: https://xkcd.com/2347/

In this case the hero's name is apparently Simon Josefsson (maintainer).

AlienRobot•3m ago
https://xkcd.com/2347/

Ah, someone beat me to it!

Arubis•17m ago
Telnet's cleartext and always has been. A backdoor seems like overkill.
trebligdivad•14m ago
Why are people still using telnet across the internet in this century? Was this _all_ attack traffic?

(OK, I know one ancient talker that uses it - but on a very non-standard port so a port 23 block wouldn't be relevant)

mcpherrinm•12m ago
As I understand it, greynoise is monitoring scanner traffic, so yes this would all be scans or attacks
jaredsohn•3m ago
To watch Star Wars in ASCII.

telnet towel.blinkenlights.nl https://www.youtube.com/watch?v=Mhcf6tc2jeQ

(Remember hearing about this many years ago and verified it still exists.)

catskull•9m ago
When I was an intern for some reason they issued me a voip phone for my desk. One day I got bored and figured out I could telnet into it. Nothing interesting but it was still a fun moment for me!

Show HN: CAD parts builder with WASM and WebGL

https://modo.is/b/multimeter-stand-with-storage
1•Beefin•5m ago•0 comments

GPT-5.3-Codex being routed to GPT-5.2

https://github.com/openai/codex/issues/11189
2•cactusplant7374•6m ago•0 comments

Show HN: Thoth – Obsidian AI Research Assistant

https://github.com/acertainKnight/project-thoth
1•acertainKnight•7m ago•0 comments

A Daily AI Chat

https://jonathannen.com/daily-ai-chat
1•jwilliams•7m ago•0 comments

Show HN: A "Today" page that turns the top HN news into lyrics, free APIs only

https://eruci.com/t.html
1•eruci•8m ago•0 comments

Replay: Eliminate Human Memory with AI

https://runreplay.com
1•zyadelgohary1•11m ago•0 comments

Ask HN: AI Companions with Persistent Memory

1•warmreed•12m ago•0 comments

.NET 11 Preview 1 is now available

https://devblogs.microsoft.com/dotnet/dotnet-11-preview-1/
2•runesoerensen•12m ago•0 comments

Show HN: Txtweb – serve a website from your domain's DNS TXT record

https://txtweb.lefelys.com/
1•lefelys•14m ago•0 comments

FDA refuses to review Moderna's application for mRNA flu vaccine

https://www.cnn.com/2026/02/10/health/fda-moderna-mrna-flu-vaccine
4•zzzeek•14m ago•0 comments

I Forced 10 AIs to play Among Us (it was insane) [video]

https://www.youtube.com/watch?v=Sxmd7T_dyaM
1•vinnyglennon•15m ago•0 comments

Game Boy Advance Dev: Drawing Pixels

https://www.mattgreer.dev/blog/gba-dev-drawing-pixels/
1•birdculture•15m ago•0 comments

You shouldn't be doing that by hand

https://airstack.garden/
1•kaniksu•15m ago•0 comments

Dorodango

https://blog.fsck.com/2026/02/10/dorodango/
1•arittr•16m ago•0 comments

Show HN: One UI to voice-control local and remote AI coding agents via tmux

https://github.com/dotdevdotdev/agentwire-dev
1•prradox•20m ago•1 comments

Show HN: Unread.ooo (peek inside anyone's inbox)

https://unread.ooo/
1•theroo•21m ago•0 comments

Magnetic mixer improves 3D bioprinting

https://news.mit.edu/2026/magnetic-mixer-improves-3d-bioprinting-0210
1•HardwareLust•21m ago•0 comments

Rugo – Ruby's elegance, Go's speed, Bash's street smarts

https://rubiojr.github.io/rugo/
1•jonmagic•21m ago•1 comments

How to Deploy and Use OpenClaw for Free, No VPS, No Monthly Subs No Mac Minis

https://www.clawnow.ai/
1•zaddyzaddy•24m ago•0 comments

Something Big Is Happening

https://shumer.dev/something-big-is-happening
3•jdkee•26m ago•2 comments

A brief history of Exchange Team gifts over the years

https://techcommunity.microsoft.com/blog/exchange/a-brief-history-of-exchange-team-gifts-over-the...
1•austinallegro•27m ago•0 comments

Arch Linux (Omarchy) – 8 Months Later: The Good, the Bad, and the Fixable

https://www.ssp.sh/blog/linux-omarchy-the-good-bad-and-fixable/
2•articsputnik•28m ago•0 comments

Philosophical and Literature/Narrative Writings

https://h5law.substack.com/
1•bipopular•28m ago•0 comments

Reef: Paste bash into fish. It just works

https://github.com/ZStud/reef
2•thunderbong•28m ago•0 comments

What This Aluminum‑Ion Breakthrough Means for You [video][14m]

https://www.youtube.com/watch?v=svHeBLgpRQs
1•Bender•29m ago•1 comments

Windows NT/OS2 Design Workbook

https://computernewb.com/~lily/files/Documents/NTDesignWorkbook/
2•markus_zhang•29m ago•1 comments

Show HN: Multi-agent-shogun – tmux and YAML mailbox for parallel AI agents

https://github.com/yohey-w/multi-agent-shogun
1•oshio_shoppaize•30m ago•1 comments

Gitmeh: AI-powered Git commits for the terminally lazy

https://github.com/ryanhellyer/gitmeh
1•ingve•33m ago•1 comments

The etymology of Arctic and Antarctic (2018)

https://uselessetymology.com/2018/01/01/the-etymology-of-arctic-and-antarctic/
1•jawns•38m ago•0 comments

Revealing hidden turbulent structures from limited observations and equations

https://phys.org/news/2026-02-revealing-hidden-turbulent-limited-equations.html
2•bikenaga•39m ago•1 comments