4 ms·
I often use tmate [1] to do this, as it simplifies some of the fiddly bits and allows granting another user temporary access without granting them credentials (
by lsowen 4y ago
I often use tmate [1] to do this, as it simplifies some of the fiddly bits and allows granting another user temporary access without granting them credentials (eg ssh key or username/password).
[1] https://tmate.io/ https://tmate.io/
- smw 4y agoYou probably shouldn't use tmate inside of most corps, your security team might be unhappy with bypassing network controls.
- yakshaving_jgt 4y agoI'd be keen to hear why tmate isn't a good idea in terms of security. As I understand it, the use of tmate is not so different from physically sitting next to a colleague and both of you taking the hot-seat with the computer. Is the vulnerability around sending a shell to tmate.io? If so, I believe there is also an option to host the software on your own server.
- orev 4y agoYou don’t see the difference between: 1) allowing anyone on the Internet to use an ssh shell on an internal server that’s protected by authentication and firewalls, vs 2) someone you know, who has already been granted physical access to your location, and likely already has a security clearance as well as undergone interviews, training, and other security checks?
- yakshaving_jgt 4y agoSeems like a false dichotomy to me. In both cases you illustrated, I would actually be pairing with someone I know.
- hansel_der 4y agoteamviewer enters the chat