Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PuTTY 0.68 has been released

chiark.greenend.org.uk

Post reply on HN
Print view View original

71–80 of 152 posts

Re: PuTTY 0.68 has been released

#71

Post by ianmcgowan »

sengork wrote: post #40

I wish they would finally implement file transfers via copy/paste mechanism inside an active terminal window. As far as I know this feature would be unique across platforms. If someone does know of an SSH terminal client that does this, please reply.

Reminds me of the bad old days of kermit and x/y/zmodem. http://www.extraputty.com/features/xmodem.html looks like a throwback to those days, over an ssh session. I wonder what you have to run on the server side for it to work?

Does uuencode or base64 work for you? I use it a lot to move stuff (aka my toolkit) to systems where I'm connected via citrix -> rdp -> ssh -> ssh. Amazingly, it works fine, though it can be slow.

  $uuencode sheet1.xml sheet1.xml | pbcopy
(switch to remote session)

  $uudecode (paste, which varies depending on how I'm connected)

  $ls -l sheet1.xml
Ta-da!

Re: PuTTY 0.68 has been released

#72

Post by rb12345 »

xs wrote: post #46
JonRB wrote: post #6

Earlier quoted context omitted.

This is the information I came to find. Thanks!

Why would such a small, simple program need to be 64 bit? Exactly what changes when moving puTTY from 32 bit to 64 bit? It now takes up more memory?

The most likely reason is ASLR support, since you have more address space available for randomisation. Other than that, you can probably get a slight boost in performance from the differences between x64 and x86, but lose out if the code is particularly pointer-heavy.

Re: PuTTY 0.68 has been released

#73

Post by YSFEJ4SWJUVU6 »

caf wrote: post #52
based2 wrote: post #2

Release Notes: Security fix: an integer overflow bug in the agent forwarding code. See vuln-agent-fwd-overflow. Security fix: the Windows PuTTY binaries should no longer be vulnerable to hijacking by specially named DLLs in the same directory (on versions of Windows where they previously were). See vuln-indirect-dll-hijack. Windows PuTTY no longer sets a restrictive process ACL by default, because this turned out to…

Isn't this "DLL hijacking" thing a bit overblown? The directory an application runs from on Windows has always been considered part of the security perimeter of the application. If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?

Can't say anything definitive about “overblown”, but I like the change.

Windows security model is inadequate, but it's good to work around it anyway.

Re: PuTTY 0.68 has been released

#74

Post by wst_ »

Years ago, when I worked on Windows, putty was a great soft. Since that time I switched to MacOS/Linux with Fish shell at work and running just a simple ssh command from terminal is a bliss. I still have Windows machine at home and I am missing terminal every time I must click though to login to my remote machine. Putty is no fun anymore... User interface has not been improved for years and, sadly, it's not working for me anymore.

Re: PuTTY 0.68 has been released

#75

Post by lupin_sansei »

JohnTHaller wrote: post #69
caf wrote: post #52

Earlier quoted context omitted.

Isn't this "DLL hijacking" thing a bit overblown? The directory an application runs from on Windows has always been considered part of the security perimeter of the application. If you can drop a malicious DLL where putty.exe lives, can't you just drop a malicious putty.exe?

It's bad if you use an insecure browser like Chrome. Chrome allows any website you visit to download DLLs directly to your Downloads directory without user interaction. Then, any installer you download and run will use the infected DLLs unless specifically keyed to look in system32 for them. Additionally, something can infect your PC and alter your PATH. Then PuTTY might pick up a fake Windows DLL from elsewhere on y…

Thankfully Chrome has fixed this issue. I just tried this and Chrome actually warns you about downloading DLLs and requires further user interaction to actually download DLL to the downloads folder:

Screenshot: https://i.imgur.com/MvRwZBi.png

Re: PuTTY 0.68 has been released

#77

Post by coreyp_1 »

jimmcslim wrote: post #4

On Windows 10, with Windows Subsystem for Linux installed, I don't find myself using Putty anymore.

Same here, but I can't figure out how to fix my main annoyance with the WSL: deactivating the bell!!! There is no reason for my computer to be making noises when I'm using tab completion!!!!!!!!!!

Re: PuTTY 0.68 has been released

#79

Post by sengork »

xs wrote: post #49
sengork wrote: post #40

I wish they would finally implement file transfers via copy/paste mechanism inside an active terminal window. As far as I know this feature would be unique across platforms. If someone does know of an SSH terminal client that does this, please reply.

How about dragging to the terminal? This is a feature of mobaxterm. Upon ssh'ing to a system, a sftp session is automatically opened as well.

Thanks that's the form of the function I was referring to.

Indeed as previously mentioned there are xmodem/uuencode alternatives but none of them would be as efficient and reliable as native SFTP/SCP.

Re: PuTTY 0.68 has been released

#80

Post by tokenizerrr »

petee wrote: post #61
atomicUpdate wrote: post #20

Earlier quoted context omitted.

It's definitely very good and has a lot to offer, but I still can't justify $70 for some reason. The free version offers enough functionality to be a very good PuTTY alternative though.

I was about to, until I read the fine print and realized it's $70 to buy, but you'll only get updates for a year; after that you buy again or stick with your current version - no bug fixes. Were there a more reasonable price for non-commercial use, I would have no problem buying sooner. On the other hand, its has the only windows Mosh implementation...the best thing since sliced bread and tmux!

For mosh there's a cygwin build and also https://chrome.google.com/webstore/detail/mosh/ooiklbnjmhbcg...
Post reply on HN