Live data from Hacker News

Putty maintainer on his attitude towards security and open source

andrewducker.dreamwidth.org

91–100 of 140 posts

Re: Putty maintainer on his attitude towards security and open source

#91

Earlier quoted context omitted.

The _demo_ limits the user with a maximum of allowed sessions. The unrestricted software has a modest licensing fee. Entirely reasonable considering the target audience.

That’s fine but why not just stick with open source PuTTY instead of switching to some commercial proprietary software.

I really wouldn't know... wasn't advocating anything - just clarifying the deal with that software.

Re: Putty maintainer on his attitude towards security and open source

#92
post #67

Earlier quoted context omitted.

For me putty is still preferred way to ssh with Windows. Nowadays windows is shipping openssh.exe, so I can run it from cmd and it kinda works for quick simple actions, but clipboard works weirdly, basically I have to use right-click/paste to reliably paste data, shift+insert works in some apps and does not work in others. Putty just works like it worked 10 years ago, it's good old reliable tool.

The new windows terminal allows you to change how copy and paste work. I recently switched from about 20 years of Putty use (some years more than others, I ran Linux on the desktop for a long time) to Windows Terminal and the windows included openssh. There are pros and cons. The new windows terminal is very nice but there's still a few annoyances. Having an actual ssh config and almost all the capabilities (no Contr…

But does windos terminal provide a phone line to scream in?

Re: Putty maintainer on his attitude towards security and open source

#93
post #32

Earlier quoted context omitted.

The hint is clearly in the sentence you're confused about -- that he has also created some puzzle games is the only plausible explanation.

FWIW, the first explanation I thought of was something like "he replied to people asking for help that he was busy doing some (jigsaw) puzzles and wouldn't answer for now, thus wasting people's time by playing with his puzzles rather than answering". edit: and by puzzle I meant that kind: https://en.wikipedia.org/wiki/Jigsaw_puzzle . Puzzle in my mother tongue is the word used for jigsaw puzzles. Other puzzles are ca…

ooh, that would explain why there was a small but steady stream of people posting jigsaw related stuff in rec.puzzles back in the usenet days!

Re: Putty maintainer on his attitude towards security and open source

#94
post #27

I once used PuTTY as the base for an internal SSH tool. We needed to provide data entry teams with access to a green screen but didn’t want to expose any more servers than what they were authorised to use and a simple interface because a lot of the data entry guys were technologically illiterate. After spending hours looking for solutions that were purpose built for this kind of thing I gave up took PuTTYs source and…

For me putty is still preferred way to ssh with Windows. Nowadays windows is shipping openssh.exe, so I can run it from cmd and it kinda works for quick simple actions, but clipboard works weirdly, basically I have to use right-click/paste to reliably paste data, shift+insert works in some apps and does not work in others. Putty just works like it worked 10 years ago, it's good old reliable tool.

I moved off PuTTy to WSL plus the new terminal. It's just easier because you have all the things available like scp etc. That said PuTTy (or rather its derivate Kitty) served me well for years. But it's just so much easier to do key management in Linux via WSL.

Re: Putty maintainer on his attitude towards security and open source

#95

It would be cool if someone would donate to him a domain. Downloading PuTTY involves relying on greenend.org.uk (which isn't obviously connected with PuTTY). You can check your download using the hashes provided on the site; but if the download has been messed with, then the hash is untrustworthy too. https://noncombatant.org/2014/03/03/downloading-software-saf...

Hah, I once ran a PuTTY download mirror for the clients of an ISP I then worked at.

It was like 20 years ago. Even then it was obvious that they don't want any fancy domains, just that the work is done and putty.exe delivered where it's needed.

Re: Putty maintainer on his attitude towards security and open source

#96

Earlier quoted context omitted.

I think this is an important point that is often overlooked. When we release code under a free software license, we are giving the software to the user, entirely. If you're using software that you own, not just merely have a license to, it is yours, be prepared to maintain it, and if you're not prepared to maintain it, maybe relying on free-as-in-freedom software is a bad decision for you.

Code released under MIT and BSD licenses should really be thought of not as free, as in speech, or free, as in beer, but free, as in mattress on the side of the road.

One I've heard is "free, as in puppy"

ie good, but comes with responsibility

Re: Putty maintainer on his attitude towards security and open source

#97
post #32

Earlier quoted context omitted.

Gee, thanks :D. I didn't know that at all and the article has no hints about that. I came to that possibility but it was reaaaally out of context and off without prior knowledge. Thanks for confirming it, I really didn't understand what was what. edit: I took a look at the page again and there are no links or mentions of puzzles or something, I knew I wasn't crazy (or that dense) !

The hint is clearly in the sentence you're confused about -- that he has also created some puzzle games is the only plausible explanation.

-- that he has also created some puzzle games is the only plausible explanation.

Nowhere there does he claim authorship, merely possession of a collection. Without knowledge of his webpage or the games, there is more than 1 logical conclusion.

Re: Putty maintainer on his attitude towards security and open source

#98

This is a nice post from a healthy person who is comfortable with his position, and isn’t overburdened. However, what would happen if that were not so? What would happen if he Could not, Would not, or were Unable to work? It would all fall apart. And that is the inherent fragility in these small critical opensource projects.

I think somebody else would pick it up. Simon is not the only person who works on PuTTY and there are several people who might reasonably pick up the security side of things. The various UI bits might be slightly less well distributed, but I am sure somebody could be found in pretty short order.

Re: Putty maintainer on his attitude towards security and open source

#99
post #60

Earlier quoted context omitted.

Indeed, Simon drops by occasionally and leaves a comment if he fancies. This one was so good I thought it was worth sharing more widely.

It's pretty darn weird realising that Simon is actually a person who knows somebody I've met IRL, rather than a mysterious benevolent entity responsible for manifesting the PuTTY suite fully-formed upon the internet ;)

Cambridge is an interesting place. You can be in a pub with pretty much the entire PuTTY team, at least two Debian project leads, a major bind contributor, and a couple of OpenJDK contributors.

The conversations can get a little geeky. :-)

Re: Putty maintainer on his attitude towards security and open source

#100
The source code for the core of Putty is an astonishing construction, a sort of extreme case of Duff's device spanning many, many pages. At each point where an operation might block, there is a macro that expands to a break and a switch/case clause that enables returning to that point.

A colleague said "I love it, and hate myself for loving it".

The new "async/await" features appearing in numerous languages encode this pattern -- i.e., result in substantially the same object code -- in a more robust way, but Putty works fine.

Post reply on HN