Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oxy – A Security Focused Remote Access Tool

oxy-secure.app

Post reply on HN
Print view View original

21–30 of 88 posts

Re: Oxy – A Security Focused Remote Access Tool

#21

Post by lucb1e »

tmikaeld wrote: post #7
raesene9 wrote: post #5

This is interesting, but shows some of the problems with the word "secure" The app. promises to be more secure than OpenSSH and provides a number of reasons why it thinks it will be. However the site is entirely anonymous, so you have no idea who wrote this tool and what their affiliations or background are. So either you audit the code to get some assurance, or you trust the author(s) without any evidence. Also the…

...and 10 lines of css would be nice.

I really like the site as it currently is. I've been considering converting my own website, which has CSS but I've still gotten readability complaints about (usually I'm the one complaining), to such a plain format.

Re: Oxy – A Security Focused Remote Access Tool

#23

Post by hjek »

tptacek wrote: post #19
kuwze wrote: post #11

Man if this guy copied Mosh's feature-set it would be really awesome. edit: I guess I assumed something I shouldn't have

It does not appear to be a "guy".

> Definition of guy

> 1 a : man, fellow

> b : person —used in plural to refer to the members of a group regardless of sex

> saw her and the rest of the guys

From https://www.merriam-webster.com/dictionary/guy

Re: Oxy – A Security Focused Remote Access Tool

#24

Post by tptacek »

hjek wrote: post #23
tptacek wrote: post #19

Earlier quoted context omitted.

It does not appear to be a "guy".

> Definition of guy > 1 a : man, fellow > b : person —used in plural to refer to the members of a group regardless of sex > saw her and the rest of the guys From https://www.merriam-webster.com/dictionary/guy

I don't know that you read the definition you just quoted as carefully as you think you did.

Re: Oxy – A Security Focused Remote Access Tool

#25

Post by raesene9 »

code_duck wrote: post #12
raesene9 wrote: post #5

This is interesting, but shows some of the problems with the word "secure" The app. promises to be more secure than OpenSSH and provides a number of reasons why it thinks it will be. However the site is entirely anonymous, so you have no idea who wrote this tool and what their affiliations or background are. So either you audit the code to get some assurance, or you trust the author(s) without any evidence. Also the…

I'd consider it primarily a source release. Since source is available, of course you should audit it, or at least glance over it before compiling.

If the goal was a source release they probably should have posted source + compilation instructions, rather than recommending curl + chmod :)

Re: Oxy – A Security Focused Remote Access Tool

#26

Post by nailer »

raesene9 wrote: post #25
code_duck wrote: post #12

Earlier quoted context omitted.

I'd consider it primarily a source release. Since source is available, of course you should audit it, or at least glance over it before compiling.

If the goal was a source release they probably should have posted source + compilation instructions, rather than recommending curl + chmod :)

they did, right underneath.

Re: Oxy – A Security Focused Remote Access Tool

#28

Post by simtel20 »

snvzz wrote: post #20

>Well how does rsync work, then? rsync relies on executing a non-ssh helper program on the remote. And that's a bad idea why?

I don't think it's being called out as a bad idea. It seems to me that the author sees it as a feature to provide this in the tool and protocol, and is mentioning it. Whether it really is a good idea remains to be seen.

[edited when I re-read the blurb and realized that oxy does more than ssh in this case]

Re: Oxy – A Security Focused Remote Access Tool

#29

Post by skibz »

snvzz wrote: post #20

>Well how does rsync work, then? rsync relies on executing a non-ssh helper program on the remote. And that's a bad idea why?

I interpreted this as not being a ‘bad idea’, rather, the implementation of rsync’s feature could be simplified if OpenSSH behaved in a similar way to Oxy.

Re: Oxy – A Security Focused Remote Access Tool

#30

Post by gnur »

skibz wrote: post #27
kuwze wrote: post #11

Man if this guy copied Mosh's feature-set it would be really awesome. edit: I guess I assumed something I shouldn't have

I stand to be corrected, but I’m pretty sure Mosh uses SSH under the hood. Perhaps Mosh could be modified to support Oxy?

Mosh only uses SSH to setup the initial connection, when the handshake between server and client has been created SSH is no longer used.
Post reply on HN