Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Invite friends to SSH into your laptop using their GitHub handle

gravitational.com

Post reply on HN
Print view View original

61–70 of 105 posts

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#61

Post by a3_nm »

aleyan wrote: post #31

Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: curl https://github.com/[github name].keys >> ~/.ssh/authorized_keys [github name] here should be replaced with github username of your friend or colleague. Really handy because I can just authorize them without a human request/response loop and manual key moving. Simple and no external tools needed. Normal cav…

Of course, caveats about trusting Github also apply. (If Github got hacked, the page https://github.com/[github name].keys would serve the public key of a fresh attacker-controlled key and would trigger shortly afterwards an SSH login attempt with that key towards the client IP to do evil stuff.)

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#64

Post by thebspatrol »

Dangeranger wrote: post #59

Regarding remote pair programming I haven't found a better or faster solution than TMate ( https://tmate.io/ ) If I am feeling paranoid about the user on the other side, I only share just the read-only link, or the web link.

This is pretty cool. Multiplayer terminal sessions.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#66

Post by Operyl »

OJFord wrote: post #56
jdc0589 wrote: post #35

Earlier quoted context omitted.

would be nice, but it would likely introduce some additional complexity for instances where there might be more than one live session spawned by a user.

> additional complexity for instances where there might be more than one live session spawned by a user I'm trying to imagine the situation that makes that worth supporting? That's not going to be a development server used by an entire team, for example, because whose Github credentials would be on it? Even so, it could just give a list of session IDs in such a case, and ask which of 1/2/3. The additional complexity…

In my head, having to have the session id is almost a good "two factor" if you will.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#67

Post by jamiesonbecker »

aleyan wrote: post #31

Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: curl https://github.com/[github name].keys >> ~/.ssh/authorized_keys [github name] here should be replaced with github username of your friend or colleague. Really handy because I can just authorize them without a human request/response loop and manual key moving. Simple and no external tools needed. Normal cav…

That's almost exactly how we (optionally, of course) import your SSH key from Github at Userify.. (well, technically we're using Python requests, not curl, but otherwise exactly the same).

The beauty of doing it this way (writing authorized_keys) is that the accounts are completely independent from a third-party auth service. (ok, I guess technically that's what we are, but we're only managing the public keys, and not directly authenticating through a remote server like a directory or database.) SSH has a beautiful design.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#68

Post by OJFord »

Operyl wrote: post #66
OJFord wrote: post #56

Earlier quoted context omitted.

> additional complexity for instances where there might be more than one live session spawned by a user I'm trying to imagine the situation that makes that worth supporting? That's not going to be a development server used by an entire team, for example, because whose Github credentials would be on it? Even so, it could just give a list of session IDs in such a case, and ask which of 1/2/3. The additional complexity…

In my head, having to have the session id is almost a good "two factor" if you will.

I suppose. Having someone's private key and knowing who's offering the legitimate owner of that key a secure session at that point in time is already a tall order though!

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#69

Post by patrickdavey »

rafadc wrote: post #33

I prefer using tmux for this to be a bit more secure. I wrote a blog post about this [0] since it is a bit of a pain in the ass to set up properly. Maybe you should explore this too for your product. [0] http://joy.pm/2015/07/11/pairing_over_tmux.html

Nice writeup, thanks for sharing.

Re: Show HN: Invite friends to SSH into your laptop using their GitHub handle

#70

Post by twakefield »

Dangeranger wrote: post #58
twakefield wrote: post #2

Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0] http://gravitational.com/teleport/

This looks pretty useful for highly dynamic infrastructure. How can nodes register with the Teleport service on provision? Do you integrate with third party authentication services like HashiCorp Vault?

You can use static or short lived tokens to bootstrap: http://gravitational.com/teleport/docs/admin-guide/#adding-n...

Vault is not yet supported but PR's welcome :)

edit: Looks like there's an open issue for consul to start: https://github.com/gravitational/teleport/issues/423

Post reply on HN