Live data from Hacker News

Google Cloud Shell

cloud.google.com

111–120 of 162 posts

Re: Google Cloud Shell

#111

What's the point of this? I can already ssh into any of my instances on AWS, Linode, whatever platform. Is it just because it's in the browser. Who cares...

This is a big deal for high school students. They can use a school-issued laptop, but they can't install custom software (like an ssh client), so sites like Cloud9 provide access to something that would otherwise by inaccessible to them.

Source: I'm a high school teacher at just such a school.

Re: Google Cloud Shell

#112
At SunSed.com we moved from linode to GC a year ago! It has been great! The only thing that I am currently looking for is GC HTTP(S) load balancing support for HTTP/1.1 100 Continue response.

Re: Google Cloud Shell

#113
post #63

Earlier quoted context omitted.

You can reach your full cloud infrastructure from any browser, all you need to remember is your google password. No need for a terminal or ssh, a regular windows, os x, linux, chromebook or tablet will do. Quite handy.

Handy? That sounds like a security nightmare. Your instances are accessible by simply being able to gain access to the Google account? Even with 2-factor authentication, this is a serious no-no to basic security requirements. A remote server should be only accessible from specific IPs using ssh keys. No passwords, no world-accessible browser interface.

This is the trade off I've wrestled with. I've kicked around setting up a Clound9 IDE with access to our environments, so that I can access and repair any of our production environments remotely without needing my laptop.

Re: Google Cloud Shell

#114
post #108

As a long time user of googles web based terminal (accessed normally through google cloud platform console by listing your VMs and clicking the SSH button): I love it because I don't need to worry about key management and can access my machines anywhere that has a browser. However, my few gripes are: 1)when copying text out of the web terminal window that spans multiple lines (on Mac osx chrome), newlines are inserte…

> ctrl v doesn't work (nano/pico)

OT, this is a big reason why I encourage people to learn vi/vim.

It doesn't rely on ctrl, and can be used in environments that do weird mappings to control characters. Anything you can do with ctrl, can be done with regular keys and commands.

Re: Google Cloud Shell

#115

Earlier quoted context omitted.

disclaimer: I work at GCP That is rad! Anything we can do to help? Link to the company?

I have noticed that all google cloud services now require credit card information for validation. Can this be be made optional and instead rely on their Gmail accounts ? (Especially for people just wanting to tinker with new services for fun)

disclaimer: opinions are my own

I suspect that it's unlikely that google can remove this because bad guys tend to spin up many free trial instances and do bad things (sharded bitcoin mining, DDoS'ing, etc). Privacy is #1 so they aren't allowed to look inside your machines or inspect your traffic...so that leaves billing / such metadata to fight abuse.

Re: Google Cloud Shell

#116
post #87

Earlier quoted context omitted.

Handy? That sounds like a security nightmare. Your instances are accessible by simply being able to gain access to the Google account? Even with 2-factor authentication, this is a serious no-no to basic security requirements. A remote server should be only accessible from specific IPs using ssh keys. No passwords, no world-accessible browser interface.

> A remote server should be only accessible from specific IPs using ssh keys. No passwords, no world-accessible browser interface. Maybe if you own the servers. Since they're Google's or Amazon's servers you have to be able to administer them with some set of Google or Amazon credentials. Otherwise what would you do if sshd crashed?

> Otherwise what would you do if sshd crashed?

Kill that instance, and spin up a new one.

A wise BOFH gave a preso that stuck with me "Treat EC2 instances like cattle. When one strays off the farm, put a bullet in it's head."

Don't treat your cloud machines as special snowflakes. Build infrastructure via script.

Re: Google Cloud Shell

#117
post #46

Earlier quoted context omitted.

Well, not always. As a student, you don’t want to spend 4$ for a cloud console, plus 4$ for cloud IRC, plus 20$ for a VPS, plus 12$ for your phone contract, plus 120$ for a new phone every 2 years... I – like most people – don’t let useless devices run on standby either, costing me upwards of 30$ a year for a TV on standby. As a student, I don’t buy totally overpriced coffee that costs that much either.

You're well past the point of diminishing returns where it makes sense for you to focus your efforts more on increasing income rather than reducing expenditures further. If saving $1 per month is significant to you then it sounds like you've already cut your expenditures to the bone, and there's no more blood to squeeze from that stone. Even working a single hour per week at a part-time job would have better returns…

I’m a student, I have not much time to work during the day, and jobs during the night are not exactly growing on trees.

Also, I’d still cut expenditures equally. Even my parents – both of which have studied law – do this. Actually, most people I know do. Why waste money on useless devices if it takes only seconds to unplug them?

Re: Google Cloud Shell

#118

So, what if you don't have that button? Is there a minimum amount of product you need to have before this service becomes active?

I don't have it on my main Google account, so I signed into a test account that I use pretty much for testing apps, but never for anything serious, and voila, there it is. So I'm guessing it's pretty random how it is being rolled out.

Re: Google Cloud Shell

#119
post #2

> Use of the Cloud Shell is free through the end of 2015: you will not be charged for any resource utilization. Would be nice if they could have stated how much it's going to cost later on. We're less than three months from 2016.

Well, it's a micro instance. At most it'll cost what a micro instance costs.

There seems to be 5GB of associated storage ... would be interested to know if they are charging for that or if it's part of your wider Google allocation or if there's an ongoing cost once you generate data in there that will keep charging forever, even if you use the service only intermittently?

Re: Google Cloud Shell

#120
post #87

Earlier quoted context omitted.

Handy? That sounds like a security nightmare. Your instances are accessible by simply being able to gain access to the Google account? Even with 2-factor authentication, this is a serious no-no to basic security requirements. A remote server should be only accessible from specific IPs using ssh keys. No passwords, no world-accessible browser interface.

> A remote server should be only accessible from specific IPs using ssh keys. No passwords, no world-accessible browser interface. Maybe if you own the servers. Since they're Google's or Amazon's servers you have to be able to administer them with some set of Google or Amazon credentials. Otherwise what would you do if sshd crashed?

I understand your point. I host on linode which has Lish (an out-of-bound terminal that gives you command-line access without ssh). I have it turned off normally, but again can be turned on by anyone who gains access to my account with credentials and 2-factor auth. It should take a lot more from an attacker to be able to access your servers.
Post reply on HN