3 ms·
Interesting, but if I’m not technical enough to do this for myself would I not be giving this service a back door to all my devices?
by asimpleusecase 3y ago
Interesting, but if I’m not technical enough to do this for myself would I not be giving this service a back door to all my devices?
- ghoshbishakh 3y agoNo this only creates a tunnel to port 22 of your IoT device. And on that port the ssh server of the IoT device is running, which is by design secure. So this is not really a "backdoor", rather the standard frontdoor which is made secure by OpenSSH. For example, if you have an instance in AWS or any other cloud provier, most probably the SSH port is open. The other layer of security is possible through a VPN, there the attacker first needs to enter the VPN network before getting a chance to crack SSH. Now here is the practical scenario: An attacker needs to find the credentials to the VPN server as well as the SSH keys to access the ssh server. If one is leaked through some compromised device, most likely the other will also be leaked. Therefore, keep the credentials safe :)