SSH Secret Menu • Hacker News Board

Re: SSH Secret Menu

#181

Post by project2501a » Thu, Mar 12, 2026, 4:47 PM UTC

JayGuerette wrote: post #107

project2501a wrote: post #63

Earlier quoted context omitted.

Honest question, why is ProxyCommand `fun`? What do I get out of ProxyCommand that i do not get out of setting the correct order for ProxyJump and doing an ssh finalhost -- domy --bidding?

I use ProxyCommand in edge-case devices where key auth is not an option and the password is not controlled by me. ProxyCommand points to a script the retrieves the password from the vault, puts it on the clipboard for pasting, reminds me via stderr it's done so, and then proxies the connection.

Interesting. I might have such a use case. Do you have anything about best practices on how to automate grabbing passwords from vaults? Cuz it seems to me that the vault needs to be kept open or keep the vault password somewhere on disk.

Re: SSH Secret Menu

#182

Post by antisol » Thu, Mar 12, 2026, 6:15 PM UTC

spwa4 wrote: post #179

antisol wrote: post #176

Earlier quoted context omitted.

When your firewall guys "block" ssh (or anything else), all you need to do is run your ssh server on port 443 and then `ssh -p 443 user@host`. Running on 443 means it will blend in with https traffic, making it much more difficult for them to detect and block (I've never actually seen anywhere that can detect/block it - you'd need to be doing deep packet inspection on encrypted traffic) :)

Nice. But is it possible to run both ssh and https (ideally with auto-certbotting) on the same port?

Not on the same IP at the same time, but you could always add a second IP for ssh. Just configure sshd to only listen on one IP and to listen on the other.

Re: SSH Secret Menu

#183

Post by efilife » Fri, Mar 13, 2026, 12:53 PM UTC

etrvic wrote: post #127

devnotes77 wrote: post #125

[flagged]

Llm generated comment? Am I going crazy?

You are not crazy. This account's comments are all LLM generated. ALMOST believable

Re: SSH Secret Menu

#184

Post by BenjiWiebe » Tue, Mar 17, 2026, 5:51 PM UTC

gear54rus wrote: post #87

ploxiln wrote: post #51

Earlier quoted context omitted.

Just type without cat, your shell will show you another prompt, and the ssh escape command will also work.

No they are correct, fish seems to intercept this or something like that. Only works with cat.

So you're saying 'fish' intercepts it on the far end? The ssh server on the far end shouldn't be sending it to 'fish' until it knows what's coming next.

Is this a current-ish version of OpenSSH or some other client/server?

EDIT Interesting! I tested it with fish and it does indeed intercept it! Wonder how that works.