FileZilla

From Infogalactic: the planetary knowledge core
Jump to: navigation, search
FileZilla
FileZilla Icon
300px
FileZilla 3.7.3 running under Ubuntu MATE
Developer(s) Tim Kosse
Initial release 22 June 2001 (2001-06-22)
Stable release 3.14.1 (16 October 2015; 8 years ago (2015-10-16)) [±][1]
Preview release 3.14.0-rc2 (9 September 2015; 8 years ago (2015-09-09)) [±][2]
Written in C++, wxWidgets
Operating system Cross-platform
Size 5.8 MB
Available in Multilingual
Type FTP client
License GNU General Public License Version 2
Website filezilla-project.org

FileZilla is a free software, cross-platform FTP application, consisting of FileZilla Client and FileZilla Server. Client binaries are available for Windows, Linux, and Mac OS X, server binaries are available for Windows only. The client supports FTP, SFTP and FTPS (FTP over SSL/TLS). Support for SFTP (SSH File Transfer Protocol), which can be used to share folders over a network, is not implemented in FileZilla Server.[citation needed]

FileZilla's source code is hosted on SourceForge and the project was featured as Project of the Month in November 2003.[3] However, there have been criticisms that SourceForge bundles malicious software with the application; and that FileZilla stores users' FTP passwords insecurely.

History

FileZilla was started as a computer science class project in the second week of January 2001 by Tim Kosse and two classmates[who?].[4] Before they started to write the code, they discussed under which licence they should release the code.[4] They decided to make FileZilla an open-source project because many FTP clients were already available, and they didn't think that they would sell a single copy if they made FileZilla commercial.[4]

Features

These are some features of FileZilla.[5]

  • Transfer files in FTP, SFTP, encrypted FTP such as FTPS and SFTP
  • Support IPv6 which is the latest version of internet protocol
  • Available in 47 languages worldwide (Arabic, Armenian, Basque, Bulgarian, Catalan, Chinese, Corsican, Croatian, Czech, Danish, Dutch, German, Greek, Estonian, Finnish, French, Gallegan, Hebrew, Hungarian, Indonesian, Icelandic, Italian, Japanese, Georgian, Khmer, Korean, Kurdish, Kyrgyz, Lithuanian, Latvian, Macedonian, Norwegian, Nepali, Occitan, Persian (Farsi), Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Thai, Turkish, Ukrainian, Vietnamese)
  • Supports resume which means the file transfer process can be paused and continued
  • Tabbed user interface for multitasking, to allow browsing more than one server or even transfer files simultaneously between multiple servers.
  • Site Manager to manage server lists and transfer queue for ordering file transfer tasks
  • Bookmarks for easy access to most frequent use
  • Drag and drop
  • Directory comparison for comparing local files and server files in the same directory. When the file doesn't have the same information (name not match, or size not match) it will highlight that file in colour.
  • Configurable transfer speed limits to limit the speed transferring the files, which helps reducing error of transferring
  • Filename filters, users can filter only specific files that have the conditions they want.
  • Network configuration wizard, help configuring confusing network settings in form of step-by-step wizard
  • Remote file editing, for quickly edit file on server side on-the-fly. No need to download, edit on the computer and re-upload back to the server.
  • Keep-alive, if the connection has been idle for the long time it will check by sending keep-alive command.
  • HTTP/1.1, SOCKS5 and FTP-Proxy support
  • Logging to file
  • Synchronised directory browsing
  • Remote file search to search file on the server remotely

Reception

In May 2008 Chris Foresman assessed FTP clients for Ars Technica, saying of FileZilla: "Some friends in the tech support world often recommend the free and open-source FileZilla, which offers a Mac OS X version in addition to Windows and Linux. But I've never been thrilled about its busy interface, which can be daunting for novice users."[6]

Writing for Ars Technica in August 2008 Emil Protalinski said: "this week's free, third-party application recommendation is FileZilla.... This FTP client is very quick and is regularly updated. It may not have a beautiful GUI, but it certainly is fast and has never let me down."[7]

Go Daddy, Clarion University of Pennsylvania and National Capital FreeNet recommend FileZilla for uploading files to their web hosting services.[8][9][10]

FileZilla is available in the repositories of many Linux distributions, including Debian, Ubuntu, Trisquel and Parabola GNU/Linux-libre.[11][12][13][14]

In January 2012 cNet.com gave FileZilla their highest rating of "spectacular"—five out of five stars.[15]

Since the project's participation in SourceForge's program to create revenue by adware, several reviewers started warning about downloading FileZilla and discouraged users from using it.[16][17]

Criticism

Bundled adware issues

In 2013 the project's hosting site, SourceForge.net, provided the main download of FileZilla with a download wrapper, "offering" additional software for the user to install. Numerous users reported that some of the adware installed without consent, despite declining all install requests, or used deception to obtain the user's "acceptance" to install. Among the reported effects are: web browser being hijacked, with content, start page and search engines being forcibly changed, popup windows, privacy or spying issues, sudden shutdown and restart events possibly leading to loss of current work. Some of the adware was reported to resist removal or restoration of previous settings, or were said to reinstall after a supposed removal. Also, users reported adware programs to download and install more unwanted software, some causing alerts by security suites, for being malware.[17]

The FileZilla webpage offers additional download options without adware installs, but the link to the adware download appears as the primary link, highlighted and marked as "recommended".[17]

Missing password encryption

From version 3 onwards, FileZilla stores all saved usernames and passwords as plain text files. This allows any malware that has gained even limited access to the user's system to simply read the data stored in these files and to remotely transfer this data to the attacker, potentially handing over control of websites and servers used for further spreading malware[18] and creating powerful botnets.[19]

However, the proposed Master Password encryption would be the only solution in certain use cases. On Windows 7 and 8, users would need a Professional or higher license for NTFS Encrypting File System, or Enterprise for Bitlocker drive encryption in order to make your system secure enough for plaintext passwords, effectively making the other Windows editions insecure for using with FileZilla.[20] Furthermore, FileZilla does not communicate to the user the fact that passwords are stored in plain text.[21]

Storing encrypted private key files is still not supported in current versions, as well as using ssh-agent, in the same way as previous versions of FileZilla. Private key authentication is usually recommended over password-based authentication.[22]

Release history

Color Meaning
Pink Former test release
Red Former official release
Green Current official release
Blue Current test release

The release notes shown are for the current series build.

Release history
Version Release date[23] Changes
3.7.1-rc1 10 June 2013 New features:
  • Add command-line option to specify initial local directory

Bugfixes and minor changes:

  • Fix crash on OS X if connecting using FTP over TLS
  • Prevent file lists from jumping when they are not supposed to
3.7.1 18 June 2013 Bugfixes and minor changes:
  • Updated translations
3.7.1.1 2 July 2013 Bugfixes and minor changes:
  • Minor bump for installer changes
3.7.2 6 August 2013 Fixed vulnerabilities:
  • Apply a fix for a security vulnerability in PuTTY as used in FileZilla to handle SFTP.
3.7.3 7 August 2013 Fixed vulnerabilities:
  • Apply a fix for a security vulnerability in PuTTY as used in FileZilla to handle SFTP. See CVE-2013-4206, CVE-2013-4207, and CVE-2013-4208 for reference
3.8.1-rc2 25 May 2014 Bugfixes and minor changes:
  • Rebuilt to address a problem with the filenames of the rc1 binaries.
3.8.1-rc3 25 May 2014 Bugfixes and minor changes:
  • Fixed bundling of .xrc resources in non-Windows binaries
3.8.1 1 June 2014 Fixed vulnerabilities:
  • Updated official binaries to use GnuTLS 3.2.15, addressing CVE-2014-3466

New features:

  • OS X: Partial support for retina displays

Bugfixes and minor changes:

  • Fixed several small memory leaks
3.9.0 27 July 2014 New features:
  • Added Lao translation
  • Added an additional icon set
  • OS X: Holding modifier key while clicking Site Manager toolbar icon now shows the site dropdown menu

Bugfixes and minor changes:

  • MSW: Fix assertion when entering UNC paths
  • Fix button layout of editing dialogs
  • nix, OS X: Small performance improvement recursing through local directories
3.10.1.1 1 February 2015 Bugfixes and minor changes:
  • Fix editing of files with the same name in different directories

FileZilla Server

FileZilla Server
FileZilla Icon
225px
FileZilla Server main interface
Developer(s) Tim Kosse, et al.
Stable release 0.9.53 (12 June 2015; 8 years ago (2015-06-12)) [±][24]
Preview release none (n/a) [±]
Written in C++
Operating system Windows
Type FTP server
License GPL
Website filezilla-project.org
File:FileZilla FTP Server screenshot on Windows 7, by Sofia Lucifairy.PNG
MODE Z compression as implemented in FileZilla FTP Server

FileZilla Server is a sister product to FileZilla Client. It is an FTP server supported by the same project and features support for FTP and FTP over SSL/TLS.[25] FileZilla Server is currently available only on the Windows platform.

FileZilla Server is a free, open source FTP server. Its source code is hosted on SourceForge.net.

Features

FileZilla Server supports FTP and FTPS (FTP over SSL/TLS).[citation needed] It includes numerous functionalities, including:

  • Compression with MODE Z
  • Encryption with SSL/TLS (for FTPS)

Issues

Unlike some other FTP clients, FileZilla does not implement a workaround for an error in the IIS server which causes file corruption when resuming large file downloads.[26]

See also

References

  1. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  2. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  3. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  4. ↑ 4.0 4.1 4.2 Lua error in package.lua at line 80: module 'strict' not found.
  5. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  6. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  7. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  8. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  9. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  10. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  11. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  12. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  13. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  14. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  15. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  16. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  17. ↑ 17.0 17.1 17.2 Lua error in package.lua at line 80: module 'strict' not found.
  18. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  19. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  20. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  21. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  22. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  23. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  24. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  25. ↑ Lua error in package.lua at line 80: module 'strict' not found.
  26. ↑ Ticket #4672 (assigned Bug report) - Download continues past 100% corrupting downloaded zip file

External links

Retrieved from "https://infogalactic.com/w/index.php?title=FileZilla&oldid=2693936"