The company behind Telstra’s cloud services has been in the news lately for its plans to move away from the open source Linux distribution it’s based on and into a proprietary OS.
The telco, which has been accused of misleading customers about its web hosting service, now claims it has found a way to “bundle” the Linux OS into its own service, allowing customers to use it as a web hosting tool without having to purchase a new domain name.
A new report from telco security firm Malwarebytes says Telstra is “using a single hosting domain to host two separate Linux OS applications.”
“The Linux OS is not part of the telco’s cloud service.
We were looking into this as a possibility and found it to be possible,” Telstra spokesman Alex Ritchie said in a statement.
“We have identified two instances of this.
Malwarebytes believes Telstra has a “single-host Linux” configuration, with the two separate applications bundled together. “
This would allow us to bundle the OS into a single instance and then have it accessible from any device, including browsers, as long as the Linux service is available for that instance,” Ritchie added.
Malwarebytes believes Telstra has a “single-host Linux” configuration, with the two separate applications bundled together.
Telstra’s Linux server software, telco-branded software called Telstra Linux, was used in two different cases in the MalwareBytes report, both of which included a separate Java applet that is available in the default Telstra Cloud Service.
According to the Malicebytes report, the Java applets are called “telnet client,” “telnetserver,” and “telstra.exe,” and the Java client is “telstar.exe.”
Malicebytes also found the telnet client to be a “bundled” Java application, which is not installed by default in Telstra.
An additional Linux applet, called “Telstra Web Client,” is installed on the Telstar server and is used to interact with the Telco web interface.
When a Telstra server is connected to a Telstar web server, it is exposed to the Telnet client applet.
Once an applet is running, it connects to the telstar.com website, which in turn uses telstar to communicate with the telstra.com servers.
As with the Java clients, the telstar.com server can be used to run the Java Java app, but only if a Telstar account is created for the server.
While this would normally result in a Telco server being deployed as a Tel-telstar server, the Telstarr server is not a Telnet server and can only be used for Java applications.
Another Telstra Java app is a Telfort.com web server which is a separate server that is used for Android applications.
The Java application is not packaged with the default server and Telstra could not find a way for customers to install the Java applications to their Telstar.
MaliceBytes also found another Java Java application to be installed on Telstra web servers that is called “wifimam.exe” and is available to users of Telstra Android phones.
Users of Android phones are required to create a Telspam account before accessing the telfort.net site.
Users of Windows phones are able to install Java applications by opening the “App Store” on their phone.
MaliceBytes found a Java app called “Wifimax” installed on Windows Phone, and it is not listed as a download on the “Google Play” store.
Microsoft’s Windows Phone OS has been criticized by some as a platform that doesn’t adequately support Android devices, and some have criticized the Windows Phone operating system for not properly integrating the Linux desktop and browser applications.