Best of SSH — 2024

1. 1
   Video

   ByteByteGo·2y

   How SSH Really Works

   SSH is essential for providing secure remote access over unsecured networks. This video explains how SSH creates a secure tunnel between client and server, focusing on SSH2, which offers improved security features compared to SSH1. Key aspects covered include TCP connection establishment, version and algorithm negotiation, key exchange using the Elliptic Curve Diffie-Hellman method, and public key authentication. Once authenticated, all communication between the client and server is encrypted using a session key. SSH also supports local forwarding for tunneling other network services securely.

   254

   4
2. 2
   Article

   ByteByteGo·2y

   EP124: How does SSH work?

   SSH (Secure Shell) is a protocol for securely connecting to remote machines over an unsecured network. It encrypts connections and offers various authentication and data transfer mechanisms. SSH-2, standardized by the IETF, features three main layers: Transport, Authentication, and Connection. The Transport Layer ensures secure communication, the Authentication Layer verifies user identities, and the Connection Layer multiplexes encrypted communication into multiple channels.

   207

   6
3. 3
   Article

   Hacker News·1y

   Computer Networking Fundamentals

   This post provides a succinct and illustrated guide to computer networking basics, focusing on practical knowledge for developers. It covers fundamental concepts like the Data link layer, iptables in Linux, SSH tunnels, and the differences between network bridges and switches. Additionally, the post includes various hands-on labs to help readers understand and apply the concepts in real-world settings.

   170

   2
4. 4
   Article

   Hacker News·2y

   What You Get After Running an SSH Honeypot for 30 Days

   This post discusses the results of running an SSH honeypot for 30 days, including the number of login attempts and information about the attackers' tactics.

   122

   3
5. 5
   Article

   Noted·1y

   Nexterm - Self-Hosted Web Terminal

   Nexterm is a self-hosted web terminal designed to simplify server management for homelab enthusiasts. It supports SSH, VNC, and RDP protocols, features two-factor authentication, session management, and integrates with Proxmox for managing Linux Containers and VMs. Nexterm is currently in development and open for preview, offering users the opportunity to provide feedback and test its capabilities.

   96
6. 6
   Article

   Techunter·1y

   Linux Cheat sheet

   89

   6
7. 7
   Article

   Community Picks·1y

   gnmyt/Nexterm: The open source server management software for SSH, VNC & RDP

   Nexterm is an open-source server management software designed to work with SSH, VNC, and RDP. It is distributed under the MIT license and offers a preview for users to try out its functionalities.

   89

   4
8. 8
   Article

   Laravel News·2y

   Build SSH Apps with PHP and Laravel Prompts

   The ssh-php project by Sam Carré offers a simple starting point for building Text-based User Interfaces (TUIs) over SSH using PHP. It integrates Laravel Prompts, Chewie, and Docker, facilitating both development and deployment. The project includes commands for running an SSH server in a Docker container and connecting to it. Comprehensive installation instructions and resources are available on GitHub.

   84

   1
9. 9
   Article

   System Weakness·2y

   Setup SSH Keys

   SSH keys provide a secure method of authenticating to remote servers, replacing traditional passwords. This tutorial covers generating an SSH key pair, copying the public key to a remote server, verifying the keys, and disabling password authentication for enhanced security.

   63

   4
10. 10
    Article

    Lobsters·2y

    wip: terminal (initial commit)

    Instructions for ordering Nil Blend coffee from Terminal shop and using SSH.

    62

    7
11. 11
    Article

    Hacker News·2y

    d3witt/viking: Simple way to manage your remote machines and SSH keys

    Viking is a tool that simplifies the management of remote machines and SSH keys, offering commands to execute shell commands, manage SSH keys, configure settings, and handle multiple remote machines. It supports installations on Unix and Windows systems and allows usage of SSH Agent if keys are not specified. Viking stores data locally but the directory can be customized.

    61

    1
12. 12
    Video

    Community Picks·2y

    So You Think You Know Git - FOSDEM 2024

    The speaker covers various topics related to Git, including helpful config options, the benefits of using SSH for signing commits, tools for working with large repositories, enforcing merge types and other requirements on GitHub, virtual branches in Git, planned improvements for submodules, desired features for Git, and the advantages of visual tools like GUIs or IDEs in Git.

    59

    3
13. 13
    Article

    Hacker News·1y

    How I configure my Git identities

    The post details how to configure multiple Git identities using includeIf directives and the hasconfig condition based on the remote URL. It further explains how to manage SSH keys for different Git repositories by customizing the ~/.ssh/config file and using the insteadOf directive in Git config. The approach ensures that the correct identity and SSH key are used depending on the repository being accessed.

    46

    4
14. 14
    Article

    Lobsters·2y

    superbrothers/opener: Open URL in your local web browser from the SSH-connected remote environment.

    Opener is a daemon that allows users to open URLs in their local web browser from an SSH-connected remote environment. It uses local commands like 'open' on macOS or 'xdg-open' on Linux. Users forward the socket file of the opener daemon when logging into SSH, enabling the remote to send URLs back to the local environment for opening. Installation involves Homebrew, setting up SSH configs, and creating fake 'open' commands.

    42
15. 15
    Article

    Hacker News·2y

    Autossh/autossh: Automatically restart SSH sessions and tunnels

    Autossh is a tool designed to automatically restart SSH sessions and tunnels when they fail or stop passing traffic. It uses different methods, such as setting up a loop of SSH forwardings or employing a remote echo service, to monitor and maintain connections. With support for environment variables and additional flags like -M for specifying monitoring ports, autossh enhances the reliability of SSH connections.

    40

    1
16. 16
    Article

    Hacker News·2y

    alebeck/boring: The `boring` SSH tunnel manager

    The 'boring' SSH tunnel manager is a simple and reliable command-line tool designed for managing SSH tunnels. It supports both local and remote tunnels, is compatible with SSH config and ssh-agent, and allows automatic reconnection. Configuration is user-friendly via a TOML file, and it supports Unix sockets. Binaries are available for macOS and Linux, or it can be built from source.

    38

    1
17. 17
    Article

    It's Foss·2y

    Transfer Files Between Remote and Local Over SSH

    Learn how to transfer files between remote and local systems using the scp and rsync commands over SSH. The guide covers syntax for copying files and directories from local to remote, and vice versa. Examples demonstrate both single and multiple file transfers. The use of rsync for more versatile file handling, including backups, is also touched upon.

    37
18. 18
    Article

    Lobsters·1y

    Eternal Terminal

    Eternal Terminal (ET) is a remote shell that ensures uninterrupted sessions even during network outages and IP changes. It maintains the active session seamlessly without the need to restart or reinitiate manually, offering an advantage over traditional SSH and alternatives like Autossh and Mosh by supporting tmux control mode and native scrolling.

    33
19. 19
    Video

    Dreams of Code·2y

    Why I don't change SSH from port 22

    Changing the SSH port from the default of 22 is often debated as a method to improve security. However, this practice is considered security through obscurity, which doesn't effectively enhance security. Automated tools can easily identify the new port, making the remapping ineffective. Instead, better security measures include disabling root access, forcing key-based authentication, and using tools like Fail2ban to monitor and block suspicious activities.

    33

    5
20. 20
    Article

    habr·1y

    Debugging SSH connections: A Comprehensive Guide

    SSH is integral to remote system administration and secure access, but debugging connection issues can be complex due to cryptographic protocols and security-focused error messages. Understanding the SSH connection process, common errors, and their solutions is key. Techniques include checking server status, verifying DNS and network configurations, correcting permissions, and enabling verbose logging. Advanced troubleshooting with server-side logging and tools like netcat or traceroute can provide deeper insights. Effective SSH troubleshooting requires a methodical approach and comprehensive understanding of potential failure points.

    28
21. 21
    Article

    Planet Python·2y

    SSH Scripting with Fabric and Python

    Learn how to use Fabric, a high-level Python package for executing shell commands remotely over SSH. This guide covers installation, establishing connections with credentials or SSH keys, running commands, and transferring files between a local and remote machine. Fabric simplifies tasks like uploading files to restricted directories by combining file transfer with sudo operations.

    28

    1
22. 22
    Article

    Hacker News·2y

    jpillora/chisel: A fast TCP/UDP tunnel over HTTP

    Chisel is a fast TCP/UDP tunnel over HTTP, secured via SSH. It provides easy-to-use, performant, and encrypted connections. It allows passing through firewalls and provides a secure endpoint into your network. Chisel is written in Go and can be used for various purposes such as creating tunnel endpoints, reverse port forwarding, and as a reverse proxy.

    26

    1
23. 23
    Article

    Web Developer·2y

    TypeScript 5.6 🆕, SSH 2FA 🔐, Nuxt Tips 💡, SSH3 🔒

    Learn about the latest features in TypeScript 5.6, including stricter nullish checks, new iterator methods, and arbitrary module specifiers. Discover how to set up two-factor authentication for SSH, and explore hidden Nuxt tips, such as query params in server routes and layout fallbacks. Additionally, find tools for creating SVG icons, optimizing your node_modules directory, and implementing SSH encryption with QUIC + TLS.

    25
24. 24
    Article

    System Weakness·2y

    SSH server Secure configuration in Linux

    Learn how to install and securely configure an SSH server on Linux. The guide covers essential security mechanisms such as changing the default port, binding SSH to specific IPs, disabling root login, setting up public key authentication, and using both passwords and keys for authentication. It also includes instructions on denying or allowing access based on IP and username to enhance SSH security.

    25
25. 25
    Article

    RUBYLAND·2y

    Configuring SSH Keys for Multiple GitHub Accounts

    Learn how to configure SSH keys for managing multiple GitHub accounts, including personal and enterprise accounts. The post explains setting up SSH configs to switch keys automatically, using Git's url.insteadOf variable to streamline the process, and maintaining a clean Git setup by including custom configuration files.

    24

    1