[{"data":1,"prerenderedAt":493},["ShallowReactive",2],{"project-13485501":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":45,"post_text":47,"what":48,"said":51,"maker_in_thread":180,"shape":186,"grid":190,"attempts":455,"same_week":456,"maker_shows":37,"maker_hidden":485,"reader_version":486,"card":487},"13485501","Teleconsole","Invite friends to SSH into your laptop using their GitHub handle","title","Show HN: Invite friends to SSH into your laptop using their GitHub handle","http:\u002F\u002Fgravitational.com\u002Fblog\u002Finstant-ssh-github\u002F","gravitational.com","twakefield",1485374972,2017,334,99,60,2242,3,"legend","infrastructure","remote access","cli",[24,21,25,26],"ssh","nat traversal","pair programming","mixed",-0.323,{"positive":30,"neutral":31,"mixed":32,"critical":33},6,18,0,17,41,{"idea":36,"privacy":38,"design":41,"docs":43,"execution":44},{"positive":37,"critical":30},4,{"positive":39,"critical":40},1,9,{"positive":39,"critical":42},2,{"positive":32,"critical":32},{"positive":32,"critical":32},[46,32,32,32,39,39,18,32,46,18,18,39,39,39,39,32,32,32,39,18,32,39,39,39,32,39,32,18,46,39,32,46,18,46,46,39,32,39,32,32],5,null,{"problem":47,"audience":47,"pricing":47,"motivation":47,"time_to_build":47,"stack":49,"openness":50,"stage":50,"team_size":50},[],"unknown",{"praise":52,"objections":65,"requests":107,"questions":122,"alternatives":137},[53],{"value":54,"source":55,"evidence":56},"Useful for pairing and for reaching machines behind NAT","commenter",[57,61],{"id":58,"by":59,"text":60},"13487407","Dangeranger","This looks pretty useful for highly dynamic infrastructure. How can nodes register with the Teleport service on provision? Do you integrate with third party authentication…",{"id":62,"by":63,"text":64},"13490421","nodesocket","Awesome! I just launched a DevOps consulting company (https:\u002F\u002Felasticbyte.net), and Teleconsole looks like a great option for interactive SSH sessions with clients.",[66,85,96],{"value":67,"source":55,"evidence":68},"Trusting a central proxy and cloud service with access",[69,73,77,81],{"id":70,"by":71,"text":72},"13486348","mschuster91","Hmm. Seems like all traffic goes through a central proxy server. Shouldn't it be possible to use the central server only for hole-punching and implement a TCP-over-UDP connection…",{"id":74,"by":75,"text":76},"13488350","andrewguenther","This is really the correct way to accomplish what this project is trying to do. No central proxy server that you need to trust and can be trivially done with the commands you…",{"id":78,"by":79,"text":80},"13485665","problems","Yeah, what a great idea, let random \"cloud\" services authenticate who gets to login to your machine!",{"id":82,"by":83,"text":84},"13487026","chinathrow","> We don't store the sessions Interesting - but how can we trust you?",{"value":86,"source":55,"evidence":87},"Curl-pipe-sh installation is risky",[88,92],{"id":89,"by":90,"text":91},"13486659","giblfiz","how is \"curl https:\u002F\u002Fwww.teleconsole.com\u002Fget.sh | sh \" Still considered even a remotely acceptable method for installation?",{"id":93,"by":94,"text":95},"13486734","geofft","What's wrong with it? If you're claiming that you don't get the ability to audit the code, I'd like to watch you audit a .\u002Fconfigure shell script generated by GNU autoconf. If…",{"value":97,"source":55,"evidence":98},"No abuse prevention for unwanted uploads",[99,103],{"id":100,"by":101,"text":102},"13486141","cfv","What kind of abuse prevention measures does this have in place? As it stands it looks like a super convenient way to scp garbage into other people's computers and I'm not sure…",{"id":104,"by":105,"text":106},"13486257","old-gregg","Zero. It's an instant self-configuring SSH server, so the prevention measures are similar as with OpenSSH: if you don't want garbage on your computer, do not add public keys of…",[108,115],{"value":109,"source":55,"evidence":110},"Self-hosting option for the full setup including the proxy",[111],{"id":112,"by":113,"text":114},"13493845","e12e","From a quick Re-reading of the teleport readme, and the teleconsole one - I'm a little unclear if there's an easy way to \"self-host\" a complete teleconsole-setup including the…",{"value":116,"source":55,"evidence":117},"Join sessions via GitHub ID instead of session ID",[118],{"id":119,"by":120,"text":121},"13485714","OJFord","Would be neat if having done ``` teleconsole -i other_users_github_id ``` my teleconsole session ID would be sent to server along with my Github ID (optionally other user's too)…",[123,130],{"value":124,"source":55,"evidence":125},"How is the session encrypted end to end through the proxy",[126],{"id":127,"by":128,"text":129},"13485683","sigjuice","I'm guessing the SSH session between me and my friend is not encrypted end-to-end because of proxies and what not in between?",{"value":131,"source":55,"evidence":132},"Why would someone want frequent SSH access to their machine",[133],{"id":134,"by":135,"text":136},"13486089","eof","I'm confused and have a couple questions: 1. Why would I want someone to ssh into my machine -- at least with the frequency that a service to help me do it is valuable? 2. How is…",[138,145,156,166,173],{"value":139,"source":55,"evidence":140},"Importing GitHub keys with curl into authorized_keys",[141],{"id":142,"by":143,"text":144},"13486353","aleyan","Neat. I use the following incantation when authorizing folks to ssh into my servers via github public keys: ``` curl https:\u002F\u002Fgithub.com\u002F[github name].keys >>…",{"value":146,"source":55,"evidence":147},"ssh-import-id",[148,152],{"id":149,"by":150,"text":151},"13485851","matt_wulfeck","> ssh-import-I'd gh:my-gh-name That little command will pull down your GitHub public keys and add them to authorized key file for the user who runs it. Great for setting up new…",{"id":153,"by":154,"text":155},"13489927","tribaal","If you are on an Ubuntu system you can do the same thing with a native utility, try: ssh-import-id-gh \u003Cusername> It also works with launchpad (of course): ssh-import-id-lp…",{"value":157,"source":55,"evidence":158},"tmate",[159,162],{"id":160,"by":59,"text":161},"13487429","Regarding remote pair programming I haven't found a better or faster solution than TMate (https:\u002F\u002Ftmate.io\u002F) If I am feeling paranoid about the user on the other side, I only…",{"id":163,"by":164,"text":165},"13486206","Exuma","Reminds me of tmate",{"value":167,"source":168,"evidence":169},"Teleport","maker",[170],{"id":171,"by":11,"text":172},"13485593","Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer. [0]…",{"value":174,"source":55,"evidence":175},"ngrok",[176],{"id":177,"by":178,"text":179},"13486212","e_proxus","Are there any advantages to using this instead of exposing port 22 temporarily via ngrok advantages adding your friend public key to authorized_keys? (Which has the added…",{"comments":42,"answered":39,"key":181},[182,183],{"id":171,"text":172},{"id":184,"text":185},"13488067","You can use static or short lived tokens to bootstrap: http:\u002F\u002Fgravitational.com\u002Fteleport\u002Fdocs\u002Fadmin-guide\u002F#adding-nodes-to-the-cluster Vault is not yet supported but PR's welcome…",{"commenters":187,"max_depth":188,"maker_replies":42,"first_comment_mins":40,"lifespan_hours":189},73,7,91,[191,193,196,200,203,206,210,213,216,219,221,224,226,228,232,234,236,239,242,245,248,249,251,252,254,257,259,262,264,267,270,274,275,278,280,283,284,287,290,293,295,298,302,305,307,309,311,312,313,316,318,320,322,326,328,331,333,336,339,340,343,346,348,351,354,357,360,364,368,370,373,377,382,384,387,390,392,393,396,398,401,404,406,408,412,416,418,422,426,430,432,435,437,440,442,445,448,450,453],[142,32,46,192,143,32],"project\u002Fpositive\u002Fidea",[194,32,32,195,120,32],"13486428","commenter\u002Fneutral\u002Fnone",[197,32,32,198,199,32],"13486530","other\u002Fneutral\u002Fnone","schlowmo",[201,32,32,195,202,32],"13487229","ezekg",[204,32,32,195,205,32],"13487268","cderwin",[207,32,32,208,209,32],"13487449","commenter\u002Fneutral\u002Fprivacy","a3_nm",[211,32,32,208,212,32],"13488157","uiri",[214,32,32,195,215,32],"13488364","ams6110",[217,32,32,195,218,32],"13487890","jamiesonbecker",[74,32,39,220,75,32],"project\u002Fcritical\u002Fprivacy",[222,32,32,195,223,32],"13488385","kasbah",[225,32,32,195,105,32],"13488928",[153,32,39,227,154,32],"project\u002Fcritical\u002Fidea",[229,32,18,230,231,32],"13514333","project\u002Fneutral\u002Fnone","tsuyoshicho",[171,39,32,233,11,39],"maker\u002Fneutral\u002Fprivacy",[82,39,18,235,83,32],"project\u002Fneutral\u002Fprivacy",[237,39,18,235,238,32],"13487248","jedimastert",[240,39,32,198,241,32],"13487433","brianwawok",[243,39,32,198,244,32],"13487480","Mtinie",[246,39,32,198,247,32],"13498370","y4mi",[58,39,46,192,59,32],[184,39,32,250,11,39],"maker\u002Fneutral\u002Fdocs",[112,39,18,230,113,32],[119,42,18,253,120,32],"project\u002Fneutral\u002Fdesign",[255,42,18,253,256,32],"13486540","jdc0589",[258,42,18,253,120,32],"13487278",[260,42,18,253,261,32],"13487767","Operyl",[263,42,32,195,120,32],"13487925",[265,18,39,220,266,32],"13486477","rafadc",[268,18,32,195,269,32],"13487966","patrickdavey",[271,37,18,272,273,32],"13486307","project\u002Fneutral\u002Fidea","vesche",[134,46,39,227,135,32],[276,46,39,227,277,32],"13486129","hughes",[279,46,32,195,256,32],"13486592",[281,46,39,227,282,32],"13486142","bisby",[160,30,32,198,59,32],[285,30,32,198,286,32],"13487538","thebspatrol",[288,188,32,198,289,32],"13485843","scandox",[291,188,32,195,292,32],"13486076","kzisme",[149,294,32,198,150,32],8,[296,294,32,198,297,32],"13486871","kingosticks",[299,294,32,300,301,32],"13490186","other\u002Fcritical\u002Fnone","lucideer",[303,294,32,195,304,32],"13491324","koolba",[306,294,32,195,301,32],"13494315",[308,294,32,195,304,32],"13494846",[310,294,32,195,150,32],"13492625",[100,40,39,220,101,32],[104,40,18,235,105,32],[314,40,32,195,315,32],"13486608","kordless",[317,40,32,195,101,32],"13491198",[319,40,32,195,315,32],"13495287",[321,40,32,195,101,32],"13499315",[323,324,39,227,325,32],"13486149",10,"chrissnell",[70,327,39,220,71,32],11,[329,327,39,220,330,32],"13486729","bootload",[89,332,39,220,90,32],12,[334,332,39,220,335,32],"13486681","glup",[337,332,32,208,338,32],"13486773","dividuum",[93,332,32,195,94,32],[341,332,32,195,342,32],"13488856","broknbottle",[344,332,32,345,94,32],"13489011","commenter\u002Fneutral\u002Fexecution",[347,332,32,345,304,32],"13491335",[349,332,39,227,350,32],"13486740","matthewaveryusa",[352,332,32,208,353,32],"13486949","ryukafalz",[355,332,32,208,356,32],"13487159","robolange",[358,332,32,195,359,32],"13489699","pferde",[361,362,18,272,363,32],"13486770",13,"jeffheard",[365,366,18,272,367,32],"13500781",14,"chilicuil",[177,369,18,272,178,32],15,[371,369,46,372,256,32],"13486574","project\u002Fpositive\u002Fdesign",[374,369,32,375,376,32],"13486680","other\u002Fneutral\u002Fprivacy","vhost-",[378,379,39,380,381,32],"13492321",16,"project\u002Fcritical\u002Fdesign","bound008",[383,379,32,198,113,32],"13493645",[385,33,39,220,386,32],"13489977","txutxu",[388,33,32,208,389,32],"13490128","kalmi10",[391,33,32,208,113,32],"13493745",[127,31,18,235,128,32],[394,31,46,395,105,32],"13485794","maker\u002Fpositive\u002Fprivacy",[397,31,32,195,128,32],"13485957",[399,31,18,253,400,32],"13485980","rileymat2",[402,31,18,403,105,32],"13486069","project\u002Fneutral\u002Fdocs",[405,31,18,235,94,32],"13485855",[407,31,46,192,105,32],"13485914",[409,410,32,198,411,32],"13488493",19,"pipework",[413,414,32,198,415,32],"13487686",20,"domoritz",[62,417,46,192,63,32],21,[419,420,32,198,421,32],"13487483",22,"bogomipz",[423,424,39,380,425,32],"13489785",23,"netsharc",[427,424,18,428,429,32],"13490026","project\u002Fneutral\u002Fexecution","sleepychu",[163,431,32,198,164,32],24,[433,431,32,198,434,32],"13487214","mayli",[78,436,39,220,79,32],25,[438,436,32,195,439,32],"13485898","reubensutton",[441,436,32,195,79,32],"13485968",[443,436,32,195,444,32],"13486050","blowski",[446,436,32,195,447,32],"13489811","VeejayRampay",[449,436,32,195,79,32],"13492751",[451,436,32,195,452,32],"13492969","grzm",[454,436,32,195,79,32],"13496576",[],[457,462,466,471,476,481],{"id":458,"name":459,"points":460,"category":461},"13458561","DESTIGOGO",377,"consumer_social",{"id":463,"name":464,"points":465,"category":461},"13483865","Bitesnap",174,{"id":467,"name":468,"points":469,"category":470},"13450554","Krihelinator",142,"dev_tools",{"id":472,"name":473,"points":474,"category":475},"13474943","h10",138,"ai",{"id":477,"name":478,"points":479,"category":480},"13474229","Datapie",126,"data",{"id":482,"name":483,"points":484,"category":470},"13461100","Cage",119,false,"v2",{"id":488,"name":5,"line":6,"ai":485,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":489,"top":18,"kw":490,"maker":11,"domain":10,"tier":19,"attempts":32,"strip":491,"url":9,"mix":492,"praise":54,"objection":67,"sub":21},13485501,-0.32,[24,21,25,26],"5000113053311110001301110103510535510100",[30,31,32,33],1794036552018]