Shame that it does not support ed25519-sk. Apart from that, it looks very promising.
TinySSH is a small SSH server using NaCl, TweetNaCl
41–50 of 128 posts
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#42I am pleased to see another "small"-is-beautifull alternative of a critical network protocol, and in plain in simple C (I am sorry for the fan boys of absurdely complex computer languages...). There will be plenty of compiler generated holes, and other security issues, but keep your head above the water and fix all of them, you are going for the long run there. We also have drop-bear, which is in between openssh and…
If neither GitHub nor GitLab, what are you recommending? There are a few other non-DIY hosted options, but it's hard for me to translate your "fully noscript/basic (x)html friendly" spec into an actionable list of options. Or is this a "host it yourself" / DIY plea?
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#43The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Is that necessarily a bug? If you use Disney content without a license they won't give you a 30-day period to keep mis-using it. Same with using Oracle software. Why should people who create CC content provide such a grace period?
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#44tinyssh is great. One use case for it that people may not know about: using it during Linux boot so you can remotely unlock encrypted drives. I have a headless NAS server that uses dm-crypt/LUKS under ZFS. When I update my kernel/ZFS I remotely reboot the server, wait a few seconds, and then ssh into a tinyssh powered encryption key prompt to unlock the drives. (I am immediately booted from ssh, as tinyssh exits.) I…
Question: when remotely unlock the boot disk via ssh, how do you make sure the boot has not been compromised and that you are not just sending the password to the bad guys?
At some point I wanted to do something with utrablue [1], to work over network rather than Bluetooth, but then it was in go and I got lazy suddenly :)
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#45I am pleased to see another "small"-is-beautifull alternative of a critical network protocol, and in plain in simple C (I am sorry for the fan boys of absurdely complex computer languages...). There will be plenty of compiler generated holes, and other security issues, but keep your head above the water and fix all of them, you are going for the long run there. We also have drop-bear, which is in between openssh and…
If neither GitHub nor GitLab, what are you recommending? There are a few other non-DIY hosted options, but it's hard for me to translate your "fully noscript/basic (x)html friendly" spec into an actionable list of options. Or is this a "host it yourself" / DIY plea?
Soucehut works with noscript. No need to host or DIY anything.
Codeberg has a message that says "This website requires JavaScript." but I was able to use it without JS to browse around and look at code properly.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#46tinyssh is great. One use case for it that people may not know about: using it during Linux boot so you can remotely unlock encrypted drives. I have a headless NAS server that uses dm-crypt/LUKS under ZFS. When I update my kernel/ZFS I remotely reboot the server, wait a few seconds, and then ssh into a tinyssh powered encryption key prompt to unlock the drives. (I am immediately booted from ssh, as tinyssh exits.) I…
Question: when remotely unlock the boot disk via ssh, how do you make sure the boot has not been compromised and that you are not just sending the password to the bad guys? At some point I wanted to do something with utrablue [1], to work over network rather than Bluetooth, but then it was in go and I got lazy suddenly :) [1] https://github.com/ANSSI-FR/ultrablue
> how do you make sure the boot has not been compromised and that you are not just sending the password to the bad guys?
In my case, I can't. This is a NAS in my house and this is mostly to prevent me from having to go to another room and plug in a monitor and keyboard. (Also, I've done this from across the country after a power outage.)
The threat vectors I'm protecting against are I guess mostly theft of the entire machine, or forgetting to wipe the drives when I eventually toss them out. Mostly, it's just fun practice because I'm a nerd and every drive should be encrypted.
For my use-case, the auto-unlock-by-polling-a-specific-LAN-IP linked in this thread would probably be fine, for example.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#47The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Is that necessarily a bug? If you use Disney content without a license they won't give you a 30-day period to keep mis-using it. Same with using Oracle software. Why should people who create CC content provide such a grace period?
Validity of the post aside, there are real-world examples of this license being abused by third parties. Given the cost is very low to just change the license, I think it might be worth considering.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#48The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Not for that reason.
The copyleft trolls that Doctorow wrote about are using a termination clause in attribution-required CC licences. (Remember, there are lots of different CC licences with varying requirements on licensees.) CC0 doesn’t impose requirements on licensees nor does it have a termination clause, so it isn’t affected by these trolls.
However, CC0 is not good as a software license. It is explicitly restricted to being a copyright license. If there are patents covering the software, CC0 does not give you permission to exercise the patented invention.
It’s better to use 0BSD or MIT-0 instead, which grant permission to use the software without weird exceptions.
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#49The license is "CC0 1.0 Universal" In light of this post outlining a bug in early CC licenses: https://doctorow.medium.com/a-bug-in-early-creative-commons-... Discussed here: https://news.ycombinator.com/item?id=39610509 Does this need updating? EDIT: based on some discussion, it does need updating, but not for the reason I thought. I filed a suggestion here: https://github.com/janmojzis/tinyssh/issues/85
Is that necessarily a bug? If you use Disney content without a license they won't give you a 30-day period to keep mis-using it. Same with using Oracle software. Why should people who create CC content provide such a grace period?
Because people who create CC content typically do so because they want it to be available to good-faith uses, which may not always follow the exact requirements of the license by accident
Re: TinySSH is a small SSH server using NaCl, TweetNaCl
#50Is NaCl still a thing? Genuine question as I've not heard it mentioned in years.
[edit added] For those, like me, who thought this was using Google's NaCl (sandboxed C++), it's actually using Daniel Bernstein's NaCl (cryptography library).