[pilif]

> (which it really is if you use a Windows PC and something like Filezilla).

What does Windows as a client OS have to do with it? FTP is insecure because it transmits credentials in the clear and because it opens additional ports for the actual transfer of data. Neither of which are a concern of the client.

[Theodores]

Thanks for your point - I have just remembered that I have recovered someone's FTP password for them from a TCPIP stream and it was fun but not difficult!

However, of notable attacks I have witnessed recently, the plain text file of Filezilla was the attack vector. Get that and away you go!