Teleconsole
Infrastructure
remote access
SHOW HN2017
334points
99comments
#60of 2,242 in 2017
Top 3%of 2017 by points
How HN took it
MixedNo clear lean
6 positive, 18 neutral or asking, 0 mixed, 17 critical, out of 41 comments about the project. Thread score -0.32.
Idea: 4 for, 6 againstPrivacy: 1 for, 9 againstDesign: 1 for, 2 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for pairing and for reaching machines behind NAT
From 2 comments
This looks pretty useful for highly dynamic infrastructure. How can nodes register with the Teleport service on provision? Do you integrate with third party authentication…
Dangeranger on HNAwesome! I just launched a DevOps consulting company (https://elasticbyte.net), and Teleconsole looks like a great option for interactive SSH sessions with clients.
nodesocket on HN
Objections
Trusting a central proxy and cloud service with access
From 4 comments
Hmm. Seems like all traffic goes through a central proxy server. Shouldn't it be possible to use the central server only for hole-punching and implement a TCP-over-UDP connection…
mschuster91 on HNThis is really the correct way to accomplish what this project is trying to do. No central proxy server that you need to trust and can be trivially done with the commands you…
andrewguenther on HNYeah, what a great idea, let random "cloud" services authenticate who gets to login to your machine!
problems on HN> We don't store the sessions Interesting - but how can we trust you?
chinathrow on HN
Curl-pipe-sh installation is risky
From 2 comments
how is "curl https://www.teleconsole.com/get.sh | sh " Still considered even a remotely acceptable method for installation?
giblfiz on HNWhat's wrong with it? If you're claiming that you don't get the ability to audit the code, I'd like to watch you audit a ./configure shell script generated by GNU autoconf. If…
geofft on HN
No abuse prevention for unwanted uploads
From 2 comments
What kind of abuse prevention measures does this have in place? As it stands it looks like a super convenient way to scp garbage into other people's computers and I'm not sure…
cfv on HNZero. It's an instant self-configuring SSH server, so the prevention measures are similar as with OpenSSH: if you don't want garbage on your computer, do not add public keys of…
old-gregg on HN
Requests
Self-hosting option for the full setup including the proxy
From 1 comment
From a quick Re-reading of the teleport readme, and the teleconsole one - I'm a little unclear if there's an easy way to "self-host" a complete teleconsole-setup including the…
e12e on HN
Join sessions via GitHub ID instead of session ID
From 1 comment
Would be neat if having done ``` teleconsole -i other_users_github_id ``` my teleconsole session ID would be sent to server along with my Github ID (optionally other user's too)…
OJFord on HN
Questions
How is the session encrypted end to end through the proxy
From 1 comment
I'm guessing the SSH session between me and my friend is not encrypted end-to-end because of proxies and what not in between?
sigjuice on HN
Why would someone want frequent SSH access to their machine
From 1 comment
I'm confused and have a couple questions: 1. Why would I want someone to ssh into my machine -- at least with the frequency that a service to help me do it is valuable? 2. How is…
eof on HN
Alternatives named
Importing GitHub keys with curl into authorized_keys
From 1 comment
Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: ``` curl https://github.com/[github name].keys >>…
aleyan on HN
ssh-import-id
From 2 comments
> ssh-import-I'd gh:my-gh-name That little command will pull down your GitHub public keys and add them to authorized key file for the user who runs it. Great for setting up new…
matt_wulfeck on HNIf you are on an Ubuntu system you can do the same thing with a native utility, try: ssh-import-id-gh <username> It also works with launchpad (of course): ssh-import-id-lp…
tribaal on HN
tmate
From 2 comments
Regarding remote pair programming I haven't found a better or faster solution than TMate (https://tmate.io/) If I am feeling paranoid about the user on the other side, I only…
Dangeranger on HNReminds me of tmate
Exuma on HN
Teleport
From 1 comment
Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0]…
twakefield on HN
ngrok
From 1 comment
Are there any advantages to using this instead of exposing port 22 temporarily via ngrok advantages adding your friend public key to authorized_keys? (Which has the added…
e_proxus on HN