5 ms·
Suppose I've got an RPI and I want to ssh into it from anywhere in the world. If I ssh into it through a hidden service then the hidden service address IS its
by jancsika 5y ago
Suppose I've got an RPI and I want to ssh into it from anywhere in the world.
If I ssh into it through a hidden service then the hidden service address IS its canonical address, regardless of whether I'm sitting in the living room or on the international space station.
As it turns out I don't need to log in to my RPI from the ISS. But if I did need that, good luck explaining to me how to do that with impunity using a pile of brittle Linux configurations. Tell me how to do it and I bet I'll fuck it up.
- iso1631 5y ago$ ssh 123.45.67.8 Assuming there's internet on the ISS
- monocasa 5y agoThere is. They look like they're coming from a ground station to geoip.
- iso1631 5y agoI guess it would be a hassle updating geoip databases every few seconds with a new location :D
- jancsika 5y agoI didn't write it explicitly, but I was describing ssh'ing to an RPI behind a NAT as most residential U.S. internet is. In that case 123.45.67.8 won't help you. In fact, I think the comment I was responding to understood my meaning and retroactively edited their comment to include the part between the dashes about accessing a compy behind a NAT. GP-- did you do that or am I imagining things? Anyway, I agree with that comment as written-- if you don't ever need to care about breaking through NATs, Tor isn't a big benefit. (But there are, however, a large number of situations where users do care about NATs. GP only mentioned the one I had in mind. So I don't agree with the greater upshot of anonymity being the determining factor in Tor use.)
- derefr 5y agoThat use-case is exactly what I use https://www.zerotier.com/ https://www.zerotier.com/ for — SSHing into my NAS from anywhere in the world. And there's less configuration involved than setting up a Tor hidden service.
- yjftsjthsd-h 5y ago> And there's less configuration involved than setting up a Tor hidden service. Is there really? IIRC zerotier saves you having to fiddle around with keys, which is a pain, but you still need to set up the daemon, and zerotier requires you to go make an account instead of just generating keys and copying them to your client, which feels like rather more friction.