Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dropbear SSH, a lightweight alternative to OpenSSH

librebyte.net

Post reply on HN
Print view View original

101–110 of 110 posts

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#101

Post by genpfault »

_hyn3 wrote: post #95
rl3 wrote: post #8

I use an ad-free, open-source Android app called SimpleSSHD that implements a Dropbear SSH server. Being able to SSH into your phone and wirelessly perform an incremental rsync backup of all your photos and data is life-changing compared to the hell that is cables and the MTP protocol. Thank you to all these projects for delivering me from the clutches of MTP, I am indebted.

Syncthing does an admirable job here as well (also available on F-droid).

Does syncthing work on SD cards yet?

Last I checked there were some Go/Android technical hurdles that prevented it from working.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#102

Post by greedo »

_hyn3 wrote: post #94
Terretta wrote: post #66

Earlier quoted context omitted.

Let’s keep in mind the user story: “Being able to wirelessly perform an incremental backup of all your photos and data is life-changing” The LOL is telling your Mom about DropbearSSH when this is now how iCloud Photos and Files just works. The equivalent goal is baked in. You can still use cables or local WiFi via iTunes, but now all media and files sync over-the-air as files, along with an incremental backup of all…

Everything in iCloud, including your encrypted messages, are easily accessible to Apple[0] and will be released without a fight, despite Apple's vaunted privacy stance. (Perhaps that social contract has some fine print if the CEO of your company looks at your files and decides you're guilty without wasting time with 'a jury of your peers' and all that nonsense.) Android (with Google) offers the same functionality (AF…

Any data you sync to a cloud provider is subject to subpoena by LEO.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#103

Post by JoshuaRLi »

thom_nic wrote: post #93

If anyone is interested in other lightweight tools to complement a minimal embedded linux distro, check out Troglobit's GitHub repo: https://github.com/troglobit . He has a collection of tiny apps perfect for embedded systems, such as... - mdnsd (not in Busybox), - merecat httpd (much more full-featured than busybox httpd) - inadyn dynamic DNS updater - finit (IMO much nicer than busybox's runsv) - watchdogd - uftpd…

This is great, thanks for sharing!

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#104

Post by voltagex_ »

gonvaled wrote: post #39
spockz wrote: post #32

Earlier quoted context omitted.

Or ‘better’ fix an IP to your device MAC in your dhcp settings.

Usually not needed, since your router will usually try to assign a fixed address for already known devices.

What happens when the DHCP lease expires?

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#105

Post by fapjacks »

mkj wrote: post #68
fapjacks wrote: post #40

A word of caution: Many (most) IRC spambot detectors check if your connecting IP is also running a Dropbear SSHd service. This can cause you to be k-lined in some instances, and it's not immediately obvious to basically everyone why the anti-spambot bots are flagging your connection. Of course, this isn't Dropbear SSHd's fault. Just something you might want to keep in mind if you use both of these things.

Huh, what kind of dodgy IRC servers have you been on ;) ? I've never encountered that in years of IRCing from hosts running Dropbear, though I could see it happening.

Heh I should be more precise. During the summer storm season (for example the attacks last week across most of the popular networks), most networks deploy spambot countermeasures that they don't typically run on a normal day. But when they flip the switch, it tests new connections only. So for example I use ZNC and essentially never disconnect. But I disconnected to renew my LetsEncrypt certs during this time and then was k-lined on reconnection on a couple of networks.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#106

Post by grawlinson »

greedo wrote: post #102
_hyn3 wrote: post #94

Earlier quoted context omitted.

Everything in iCloud, including your encrypted messages, are easily accessible to Apple[0] and will be released without a fight, despite Apple's vaunted privacy stance. (Perhaps that social contract has some fine print if the CEO of your company looks at your files and decides you're guilty without wasting time with 'a jury of your peers' and all that nonsense.) Android (with Google) offers the same functionality (AF…

Any data you sync to a cloud provider is subject to subpoena by LEO.

tarsnap/cryptfs should really be SOP when uploading anything to cloud.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#107

Post by gonvaled »

voltagex_ wrote: post #104
gonvaled wrote: post #39

Earlier quoted context omitted.

Usually not needed, since your router will usually try to assign a fixed address for already known devices.

What happens when the DHCP lease expires?

The router will try to reassign it, usually.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#108

Post by gonvaled »

JdeBP wrote: post #77
gonvaled wrote: post #39

Earlier quoted context omitted.

Usually not needed, since your router will usually try to assign a fixed address for already known devices.

What spockz said takes the words "usually" and "try" out of that. (-:

But means more work, with web interfaces of varying quality

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#109

Post by sedlav »

tjoff wrote: post #100
sedlav wrote: post #98

Earlier quoted context omitted.

This is the way Termux works so far, External storage: Storage on external SD cards. Each app has a private folder on the external SD card, and interchange between them needs to use a special API not yet available in Termux. https://wiki.termux.com/wiki/Internal_and_external_storage

It worked fine in Android 7, when I updated to 8 my scripts started getting permission-denied errors on writes. I don't see anything in that link that says that sdcard (outside private folder) is read-only. The way I read "Each app has a private folder on the external SD card, and interchange between them needs to use a special API not yet available in Termux." is that I can't read another applications private folder…

Well I have Android 7 and termux works in the way you described at first: I have write access to the private directory for termux on the sdcard but nothing else... other applications can access every DIR in sdclard due implements SAF: https://developer.android.com/guide/topics/providers/documen... and I think this what termux doc refers to.

Re: Dropbear SSH, a lightweight alternative to OpenSSH

#110

Post by CyberShadow »

paulie_a wrote: post #73
CyberShadow wrote: post #41

Earlier quoted context omitted.

If your phone is rooted, you can use e.g. Linux Deploy to install a full Linux distribution. Then, you can set up regular ol' OpenSSH, mount /sys and /data under the Linux chroot, and rsync as usual. I use this method to rsync to btrfs snapshots (+ raw copies of non-filesystem partitions) to make daily incremental backups of the entire phone. (Restoring said backups is a bit more involved, but I verified it's doable.…

I'd backup to a more reliable filesystem than btrfs. In my experience you will eventually randomly lose data with btrfs. I have lost all trust in it.

Backups are by definition redundant, however, btrfs is still the only Linux filesystem with its featureset. Let me know when ZFS on Linux supports shrinking or cloning file ranges.

https://news.ycombinator.com/item?id=16494370

Post reply on HN