4 ms·
Since this uses SSH, how do you deal with the fact that any user could login to the remote server? Is there a custom daemon running that implements the SSH pro
by johnrob 15y ago
Since this uses SSH, how do you deal with the fact that any user could login to the remote server? Is there a custom daemon running that implements the SSH protocol, or does the client use the real SSH daemon? If it's the latter, someone could easily get a command shell. In that case, there would have to be some sort of sandbox to make sure that user can't do anything dangerous. I'd love to hear how the creators deal with this - great product btw!
- progrium 15y agoCheck out localtunnel which is open source and does the same thing: https://github.com/progrium/localtunnel https://github.com/progrium/localtunnel
- senex 15y agoHey johnrob, that's a good question. Showoff is currently implemented in three parts: a Ruby client that's essentially a lightweight wrapper around SSH, a custom unix shell implemented in Node.js, and a server written in Node.js. When a client connects to the showoff server, the custom shell is started. It only supports a showoff-specific API, so there's no way to execute arbitrary commands. It's similar in spirit to custom git shells like gitosis.