4 ms·
You need a key to access the terminal, and the key is never sent to the server or over the network, it goes in the browser hash. You could say the same about Ju
by ekzhang 3y ago
You need a key to access the terminal, and the key is never sent to the server or over the network, it goes in the browser hash. You could say the same about Jupyter being a web access tool, for instance.
sshx only lets you make ephemeral connections and isn’t meant to be a remote access tool
All session IDs and encryption keys are cryptographically generated. And sshx refuses to connect except over TLS
- quickthrower2 3y agoJupyter typically is either run local or run in containers online for example Google Colab.
- throwawaaarrgh 3y agoIf you give someone a link they can access your terminal right? Then none of the rest matters. A URL isn't a secret. Hence it's unathenticated remote access. Which is nuts. Every competent network admin in every company should be blocking this right now. What a crazy risk to open up for the sake of laziness.