Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Malai – securely share local TCP services (database/SSH) with others

malai.sh

Post reply on HN
Print view View original

41–50 of 72 posts

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#41

Post by lxgr »

amitu wrote: post #19
thenthenthen wrote: post #16

Sorry, noob here: Can this traverse managed NAT and deep packet inspection?

We are using iroh[1] internally, so the question is does iroh support these things? The quickest way to answer this would be to test it. Can you help me with what kind of setup would be needed for me to test this? [1]: https://www.iroh.computer

Sorry, but basic NAT traversal is an essential feature for any P2P network launched in at least the last 20 years, and as such doesn’t seem like something you can just leave to lower layers or even ask your prospective users to figure out themselves.

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#43

Post by tauoverpi »

amitu wrote: post #23
immibis wrote: post #22

Kulfi red flags: Does the same thing as a bunch of other systems (e.g. Tor) without providing any comparison of what this one does better. Docs pages are TODO, certainly don't explain how it works. Website is "Copyright 2025 YourCompany, Inc." Discord link goes to something called "fastn" with apparently no relation to Kulfi.

fastn is an ingredient to kulfi project. fastn.com is a full stack programming language we (FifthTry, Inc, the company behind these) have built, and it is the web server that is going to be part of Kulfi app. The comparison posts, TODO, copyright etc we will do/fix when we get around to it. It's all open source, you can send PRs as well.

How does fastn handle errors? Is is possible to perform the SQL query client side or does it prevent / add friction for such? Can I visit `/foo/";DROP%20TABLE%20users;/` or does it handle inputs properly?

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#45

Post by CGamesPlay »

amitu wrote: post #19
thenthenthen wrote: post #16

Sorry, noob here: Can this traverse managed NAT and deep packet inspection?

We are using iroh[1] internally, so the question is does iroh support these things? The quickest way to answer this would be to test it. Can you help me with what kind of setup would be needed for me to test this? [1]: https://www.iroh.computer

Yes, Iroh supports this through a variety of hole-punching means as well as via public relay servers.

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#46

Post by throwaway314155 »

amitu wrote: post #19
thenthenthen wrote: post #16

Sorry, noob here: Can this traverse managed NAT and deep packet inspection?

We are using iroh[1] internally, so the question is does iroh support these things? The quickest way to answer this would be to test it. Can you help me with what kind of setup would be needed for me to test this? [1]: https://www.iroh.computer

Did you vibe code this or something? How could you not know...?

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#47

Post by mdaniel »

lxgr wrote: post #31
amitu wrote: post #18

Earlier quoted context omitted.

Kulfi is the official name of the project, and the name of the "peer to peer internet" "id52/identity based internet", so kulfi net. Kulfi App is going to be a browser like Google Chrome, available on various app stores, and it will speak both http over tcp and http over kulfi. Kulfi app acts like client (but is also a server, so on your iPhone tomorrow you can install Kulfi, which will let you access any http over k…

What's id52? I feel like I'm missing a lot of context to understand what's being shared here.

e.g. https://github.com/kulfi-project/kulfi/blob/malai-0.2.5/kulf...

  $ echo -n c1b2d4463e503765b7422e126ea7ff5633ba5903f97b700ac818 | wc -c
    52
It would appear the leading "org-", "account-", et al are a separate namespacing of the id52 key

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#48

Post by ryao »

> It can be used to secure your SSH service, or securely share your database server.

SSH is one of the most secure network daemons ever devised. This is not to say that there is never any need to harden SSH, but given that people usually secure services behind SSH, I find the words “secure your SSH service” strange.

That said, I am no stranger to bastion/jump hosts, but those usually involve accessing one ssh host through another ssh host.

Re: Show HN: Malai – securely share local TCP services (database/SSH) with others

#49

Post by haiku2077 »

hoistbypetard wrote: post #15
thm wrote: post #3

Don't we use Tailscale for this?

Among other clear differences, it looks like tailscale requires you to sign in with some cloud provider and Malai does not. I use and like tailscale for similar purposes, but I can see why some people might prefer to skip that aspect, especially.

The hosted part of tailscale is optional. https://headscale.net
Post reply on HN