News for hackers. Stuff that matters.

A comment on Show HN: Shellvault – Cloud SSH terminal accessible from any browser.

Re:Show HN: Shellvault – Cloud SSH terminal accessible from ... by tytso on Thursday January 10, 2019 @09:38AM (#18874082)
This is described as "like Chrome Secure Shell", but the major difference is that with the Chrome Secure Shell application, the ssh client runs in the browser, so it's actually secure; where as Shellvault is an architected (by design) man-in-the-middle attack.

Advice: if you can use Chrome Secure Shell, you should do so.

[ Parent | on HN ]
Re:Show HN: Shellvault – Cloud SSH terminal accessible from ... by angerson on Thursday January 10, 2019 @10:09AM (#18874328)
Our goal is to provide a useful service for anyone who wants to be able to log in from anywhere, which does unfortunately mean we're stuck as a potential MitM. We wrote a lot of documentation about how to mitigate the security issues [1], but ultimately we encourage anyone with security on the mind to use their own SSH client.

[1]: https://www.shellvault.io/documentation/security-best-practi...

[ Parent | on HN ]