Re:Session recording for Tailscale SSH in beta
by chrisshroba on Thursday May 11, 2023 @05:53PM
(#35908892)
I've thought about this too - if you use tmux, you can use `tmux capture-pane` to grab all the output and scrollback in the current window.
Re:Session recording for Tailscale SSH in beta
by wkat4242 on Thursday May 11, 2023 @08:26PM
(#35910284)
The value is enormous but the security sensitivity is too, so it's important to only store it in secure places.
Re:Session recording for Tailscale SSH in beta
by wahern on Thursday May 11, 2023 @08:34PM
(#35910336)
And on a company laptop with automagic backups to the cloud of your home directory, what's secure? At a previous company I disabled persistent shell history, and lost count of the number of times this prevented a sensitive password or key from being added to the treasure trove of secrets that are backup archives. (The backup app nominally supported exclusions, but 1) I don't trust the correctness of corporate bloatware, and more importantly 2) I don't trust that IT or an update wouldn't reset those exclusions.)
Now, shell sessions from a bastion host scream (hopefully!) security sensitive to IT. But dumps from company laptop home directories where 99% is crap from sales and management... no way that is going to be treated with proper care, no matter how much customer PII it might contain.
Re:Session recording for Tailscale SSH in beta
by hamandcheese on Thursday May 11, 2023 @11:50PM
(#35911671)
In this day an age, are workstation backups really necessary? I can't think of anything important I do on my work machine that would need it. Maybe a days worth of code edits that haven't been pushed to GitHub.
Re:Session recording for Tailscale SSH in beta
by snapplebobapple on Friday May 12, 2023 @01:35AM
(#35912303)
If its windows and you use weird certs for external interaction like most power pools do, its pretty important, especially thw solutions that spin up a vm in the cloud foe you quickly.
Re:Session recording for Tailscale SSH in beta
by wkat4242 on Friday May 12, 2023 @02:00PM
(#35919707)
For me personally yes absolutely.
But I'm not much into the whole cloud movement for privacy reasons.
Re:Session recording for Tailscale SSH in beta
by XorNot on Friday May 12, 2023 @05:51AM
(#35914031)
On a company laptop this all sounds like the company's problem, not mine.
Re:Session recording for Tailscale SSH in beta
by catkitcourt on Sunday May 14, 2023 @02:31PM
(#35940160)
The real problem here is you are typing those "sensitive password or key" into termianl. Instead of type it directly, Use `read password` and `mysql -p$password` is the right way. Additionally, most programs can use environment variables directly, so you can even avoid showing them in the command line arguments.
If you entered something in terminal directly, I won't call it sensitive.
Re:Session recording for Tailscale SSH in beta
by yellow_lead on Friday May 12, 2023 @02:06AM
(#35912541)
This project was mentioned recently here - it does this locally, saving to sqlite.
Re:Session recording for Tailscale SSH in beta
by pcthrowaway on Friday May 12, 2023 @02:43AM
(#35912799)
And it looked amazing, until another user pointed out that if you install it, whitespace-prefixed commands will start being saved in your bash history, and they refuse to document this behaviour
Re:Session recording for Tailscale SSH in beta
by yellow_lead on Friday May 12, 2023 @09:52AM
(#35916309)
Ooh, didn't see that.
Re:Session recording for Tailscale SSH in beta
by jpeeler on Friday May 12, 2023 @10:19AM
(#35916739)
Does mcfly also have this behavior?
https://github.com/cantino/mcfly
I'll be horsing around with this tonight -- I hope ts sshing to my local computer will just work so I can get local recording as well without a separate mechanism.