3 ms·

I'd think that the abuse of a backdoor into your computer is more likely than your laptop being stolen. Would anyone else be uncomfortable installing this on yo

by ihodes 16y ago

I'd think that the abuse of a backdoor into your computer is more likely than your laptop being stolen. Would anyone else be uncomfortable installing this on your machine, or am I a little paranoid? Regardless, I think it's a neat idea. I'm no security expert, by any stretch. Thanks for the utility!

aphyr 16y ago
All this does is make an already available service (SSH) available at a predictable location. You still need to use a password, RSA/DSA keys, or other methods to log in.
- ihodes 16y ago
  Right, but you're connected to a "known" host you need to keep secure as well. So you have two machines to worry about, right? I also am not one to keep more sshds running than I need to—but I guess the chances of this being exploited are slim. Are they as slim as having your laptop stolen, though? (Genuinely curious—this seems like something you'd want to consider before using something like this.) But absolutely, it isn't like you've left an open door into your computer.
  - aphyr 16y ago
    Is it more likely? That depends on how often you leave your laptop unattended. :) I, and pretty much every hacker I know, have some machine they can SSH to on the internet, somewhere. The only added risk is exposing your laptop to an attack against the SSH daemon, which involves either weak passwords, weak/unsecured keys, or an SSH server vulnerability. The first two are easily mitigated. The third is incredibly infrequent, and when it does happen, you've got bigger problems to worry about. Almost all SSH attacks target port 22, not a random high port, so you're unlikely to even see connections to that tunnel in the first place. Finally, you don't even need to trust the remote machine, since SSH will authenticate the laptop's host key through the tunnel. MITM attacks are possible against SSHv1, but pretty much everyone is on v2 these days.
    - ihodes 16y ago
      Those are good points. I appreciate your responses—I definitely don't want to be seen as putting your program down, and I'm genuinely curious about what I was asking. I suppose the increased risk is small, and probably nothing to worry about. Cheers!
bradleyland 16y ago
If you're running Linux, chances are you already have an ssh daemon running. All this script does is keep a connection active to a known host. Your primary concern at that point would be securing the known host.
pkulak 16y ago
I'm much more likely to set this up as an easy to way to get to my home machine while away without messing with port forwarding.
bobds 16y ago
It's a potential vulnerability against high-tech threats. It's a security feature against low-tech threats.

by ihodes 16y ago

aphyr 16y ago

All this does is make an already available service (SSH) available at a predictable location. You still need to use a password, RSA/DSA keys, or other methods to log in.

ihodes 16y ago
Right, but you're connected to a "known" host you need to keep secure as well. So you have two machines to worry about, right? I also am not one to keep more sshds running than I need to—but I guess the chances of this being exploited are slim. Are they as slim as having your laptop stolen, though? (Genuinely curious—this seems like something you'd want to consider before using something like this.) But absolutely, it isn't like you've left an open door into your computer.
- aphyr 16y ago
  Is it more likely? That depends on how often you leave your laptop unattended. :) I, and pretty much every hacker I know, have some machine they can SSH to on the internet, somewhere. The only added risk is exposing your laptop to an attack against the SSH daemon, which involves either weak passwords, weak/unsecured keys, or an SSH server vulnerability. The first two are easily mitigated. The third is incredibly infrequent, and when it does happen, you've got bigger problems to worry about. Almost all SSH attacks target port 22, not a random high port, so you're unlikely to even see connections to that tunnel in the first place. Finally, you don't even need to trust the remote machine, since SSH will authenticate the laptop's host key through the tunnel. MITM attacks are possible against SSHv1, but pretty much everyone is on v2 these days.
  - ihodes 16y ago
    Those are good points. I appreciate your responses—I definitely don't want to be seen as putting your program down, and I'm genuinely curious about what I was asking. I suppose the increased risk is small, and probably nothing to worry about. Cheers!

bradleyland 16y ago

If you're running Linux, chances are you already have an ssh daemon running. All this script does is keep a connection active to a known host. Your primary concern at that point would be securing the known host.

pkulak 16y ago

I'm much more likely to set this up as an easy to way to get to my home machine while away without messing with port forwarding.

bobds 16y ago

It's a potential vulnerability against high-tech threats. It's a security feature against low-tech threats.