Live data from Hacker News

Mosh: the mobile shell

mosh.mit.edu

71–80 of 153 posts

Re: Mosh: the mobile shell

#71
post #39

Termux[0], the best Android terminal emulator (in my humble opinion), recently had mosh added to its' package repository. I currently use it and it's very nice. It makes me long for a better handheld though (my 4" Moto G screen is difficult to type on, even with Hacker's Keyboard). I can have tmux sessions running on servers with say, an irc client running, mosh in, chat away for a bit, turn it off, the irc client co…

Know of anything similar which supports android gingerbread? I'm using JuiceSSH now but I would love something with package management features like this.

Gingerbread is 6 major releases old, and the Android SDK has evolved significantly since then. You may want to consider using a different device.

Re: Mosh: the mobile shell

#72
post #24

> Mosh (and its tolerance for high packet loss) helps Iain Learmonth escape from an elevator. Um, wow! https://mosh.mit.edu/elevator.txt

Hey, never, but never, go out of an elevator that isn't leveled in the floor. By the description, I understand that he jumped from the elevator. If the elevator started to move, he could have been cut in half. This happened other day in my city.

If you are stuck in a elevator, wait for professional help to take you out.

Re: Mosh: the mobile shell

#74

Termux[0], the best Android terminal emulator (in my humble opinion), recently had mosh added to its' package repository. I currently use it and it's very nice. It makes me long for a better handheld though (my 4" Moto G screen is difficult to type on, even with Hacker's Keyboard). I can have tmux sessions running on servers with say, an irc client running, mosh in, chat away for a bit, turn it off, the irc client co…

Have you tried JuiceSSH by any chance? Curious how the two compare.

Termux is a bit of a different concept to JuiceSSH. Termux is just 100% terminal, you can install packages through apt in the command line, use standard Linux utils from your phone and on the local file system. It has no GUI.

Personally I like JuiceSSH because it has a nice simple UI for setting up and saving SSH connections. I like the extra buttons for things like ctrl/home/etc.

I'd definitely want something like Termux if I was using Android on a device with a keyboard, but for the sort of things I use a terminal/SSH for on my phone, I prefer something like JuiceSSH. Shame it's not open source though.

On topic, JuiceSSH also supports Mosh out of the box.

Re: Mosh: the mobile shell

#75
SSHing my servers with my iPhone over LTE with Prompt w/o Mosh.

Same low latency as on desktop over WiFi, perfectly fine, light code editing in Vim is butter smooth. And if connection breaks I just get back to my tmux session. So, can anybody tell what I miss?

Re: Mosh: the mobile shell

#76
post #27

Love mosh, but having no scrollback is a pain. I can hack a solution by using screen on top of mosh. They say that version 1.3 will add support for scrollback.

I earlier tried running screen on top of mosh. But it did't worked for me. Can you tell how you exactly did it?

Re: Mosh: the mobile shell

#77
post #15

Still no proper IPv6 support. I use v6 almost exclusively to get to all my servers.

I wish I had your problems, I've been waiting more than 5 years since my ISP first promised they are working on implementing IPv6 and so far I am still stuck with ~10mbit/s ADSL using IPv4 only.

Re: Mosh: the mobile shell

#79

Don't use it. It's a bigger security risk than e.g. SSH because there is no audit and so well tested regarding security.

I think caution is good, but I am not sure "Don't use it" is a fair assessment for all use cases given Mosh's technology and track record over the years. Of course SSH is more battle tested but, Mosh has a FAQ entry just for this concern:

"In one concrete respect, the Mosh protocol is more secure than SSH's: SSH relies on unauthenticated TCP to carry the contents of the secure stream. That means that an attacker can end an SSH connection with a single phony "RST" segment. By contrast, Mosh applies its security at a different layer (authenticating every datagram), so an attacker cannot end a Mosh session unless the attacker can continuously prevent packets from reaching the other side. A transient attacker can cause only a transient user-visible outage; once the attacker goes away, Mosh will resume the session."

"However, in typical usage, Mosh relies on SSH to exchange keys at the beginning of a session, so Mosh will inherit the weaknesses of SSH—at least insofar as they affect the brief SSH session that is used to set up a long-running Mosh session."

Also see, "Q: What is Mosh's security track record so far?" here: https://mosh.mit.edu/#faq

Post reply on HN