News for hackers. Stuff that matters.

A comment on Rtty – Access a device’s terminal from anywhere via the web.

Re:Rtty – Access a device’s terminal from anywhere via the web by Deukhoofd on Tuesday February 04, 2020 @03:06AM (#22233399)
Why not just use SSH?
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by frankzander on Tuesday February 04, 2020 @03:20AM (#22233467)
because it's not hip anymore. This is for the beardy old unix guys who don't understand the whole new world in the clouds.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by Hamuko on Tuesday February 04, 2020 @03:28AM (#22233493)
Perhaps it has one S too many.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by atopuzov on Tuesday February 04, 2020 @05:21AM (#22234063)
Because SSH might be blocked, and not only trough port 22 blocking but firewalls sniffing traffic and blocking on OpenSSH in the connection (eg. SSH-2.0-OpenSSH_8.1).
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by diffeomorphism on Tuesday February 04, 2020 @05:59AM (#22234265)
Then this stuff would also be blocked for the exact same reason. And if it isn't, you will probably be fired for knowingly and willfully circumventing security measures.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by d4n on Tuesday February 04, 2020 @08:11AM (#22235102)
I have gotten around this by hosting SSHD on web ports before, or going through a SOCKS proxy.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by dTal on Tuesday February 04, 2020 @06:11AM (#22234312)
You might be on a hostile, locked down client, on a hostile network. This lets you access a *nix machine you control from no more than an internet kiosk at a hotel.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by precurse on Tuesday February 04, 2020 @09:31AM (#22235878)
I definitely would not want to use a hostile machine to access my servers remotely, period. Sure, this will let you bypass outbound port restrictions, but it doesn't help in the slightest if every keystroke is keylogged.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by Fnoord on Tuesday February 04, 2020 @09:49AM (#22236091)
Keystrokes being logged could be avoided with 2FA plus not typing in sensitive content.

That doesn't secure you against MITM from the machines. E.g. if the machine is taken over locally or remotely or there's spyware running on it, you could still end up compromised.

(I'm not saying you should do this; you probably shouldn't.)

[ Parent | on HN ]