Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Invite friends to SSH into your laptop using their GitHub handle

gravitational.com

Post reply on HN
Print view View original

51–60 of 105 posts

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#51

Post by robolange »

ryukafalz wrote: post #49
matthewaveryusa wrote: post #44

Earlier quoted context omitted.

Can you explain to me the fundamental difference between this and sudo apt-get install? Note that the curl command is on an https resource. Yes if the https server is compromised there's a problem, but that's true with any other delivery method. I'm being facetious as the answer is there isn't one

>Yes if the https server is compromised there's a problem, but that's true with any other delivery method. That's not correct. In most distros, installing packages from your distro's repositories has an additional security guarantee: the packages you download have their PGP signatures verified before installation. If an attacker compromises the web server and alters the package, your package manager will reject it as…

That is true for distribution-hosted repositories. But how many web sites are there that are like, "Add this line to sources.list, then run this apt-key command, and then run apt-get install our-app." So few people bother to check for a web of trust for the proffered key (or even know how to, or even grok the concept) that there is little functional difference.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#53

Post by ezekg »

aleyan wrote: post #31

Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: curl https://github.com/[github name].keys >> ~/.ssh/authorized_keys [github name] here should be replaced with github username of your friend or colleague. Really handy because I can just authorize them without a human request/response loop and manual key moving. Simple and no external tools needed. Normal cav…

Comment of the year.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#54

Post by jedimastert »

chinathrow wrote: post #50
twakefield wrote: post #2

Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0] http://gravitational.com/teleport/

> We don't store the sessions Interesting - but how can we trust you?

If you don't, just self host!

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#55

Post by cderwin »

aleyan wrote: post #31

Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: curl https://github.com/[github name].keys >> ~/.ssh/authorized_keys [github name] here should be replaced with github username of your friend or colleague. Really handy because I can just authorize them without a human request/response loop and manual key moving. Simple and no external tools needed. Normal cav…

I guess it's not a surprise, but apparently gitlab does this too. kudos to both!

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#56

Post by OJFord »

jdc0589 wrote: post #35
OJFord wrote: post #7

Would be neat if having done teleconsole -i other_users_github_id my teleconsole session ID would be sent to server along with my Github ID (optionally other user's too) so that they could teleconsole -j my_github_id to join instead of having to share session ID and fumble around with that. No more/less secure that I can see, but it would be more convenient.

would be nice, but it would likely introduce some additional complexity for instances where there might be more than one live session spawned by a user.

> additional complexity for instances where there might be more than one live session spawned by a user

I'm trying to imagine the situation that makes that worth supporting?

That's not going to be a development server used by an entire team, for example, because whose Github credentials would be on it?

Even so, it could just give a list of session IDs in such a case, and ask which of 1/2/3. The additional complexity is only that the lookup value is a list of strings instead of a single one, surely?

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#57

Post by [deleted] »

chinathrow wrote: post #50
twakefield wrote: post #2

Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0] http://gravitational.com/teleport/

> We don't store the sessions Interesting - but how can we trust you?

[deleted]

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#58

Post by Dangeranger »

twakefield wrote: post #2

Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0] http://gravitational.com/teleport/

This looks pretty useful for highly dynamic infrastructure.

How can nodes register with the Teleport service on provision?

Do you integrate with third party authentication services like HashiCorp Vault?

Post reply on HN