It has been said that if we accidentally use
ftp instead of
sftp, people can actually see the login name and password in pure text form, and it is very bad.
But who can actually see it? Will it be operators at large firms only? Can any hobbyist at home with a broadband modem be able to see it?
I think I used
ftp accidentally a few times instead of
sftp over the past few years and there wasn't any security issue, until recently when I did it 2 months ago and then a couple of weeks ago, somebody seems to have logged into my DreamHost web panel and transferred my domain name to another registrar and then a week or two later, transfer again and tried to sell the domain name.