[{"data":1,"prerenderedAt":558},["ShallowReactive",2],{"project-18873652":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":46,"post_text":48,"what":49,"said":102,"maker_in_thread":257,"shape":267,"grid":270,"attempts":522,"same_week":523,"maker_shows":40,"maker_hidden":551,"reader_version":552,"card":553},"18873652","Shellvault","Cloud SSH terminal accessible from any browser","title","Show HN: Shellvault – Cloud SSH terminal accessible from any browser","https:\u002F\u002Fwww.shellvault.io\u002F?pw_campaign=hnjan10","shellvault.io","angerson",1547126976,2019,114,101,418,2195,20,"notable","infrastructure","remote terminal access","web_app",[24,25,26,27],"ssh","browser terminal","remote access","web ssh","roasted",-0.61,{"positive":31,"neutral":32,"mixed":33,"critical":34},2,14,4,38,58,{"privacy":37,"idea":39,"pricing":42,"design":43,"docs":44,"execution":45},{"positive":38,"critical":18},0,{"positive":40,"critical":41},1,10,{"positive":38,"critical":31},{"positive":40,"critical":38},{"positive":38,"critical":40},{"positive":38,"critical":40},[40,40,47,40,47,40,40,40,40,47,47,38,47,40,38,38,40,40,40,40,40,40,47,40,40,38,47,47,40,40,40,40,40,40,47,40,40,47,40,47],3,null,{"problem":50,"audience":60,"pricing":69,"motivation":81,"time_to_build":48,"stack":85,"openness":100,"stage":101,"team_size":100},{"value":51,"source":52,"evidence":53},"Lets users SSH into servers from any browser without a local client","maker",[54,57],{"id":55,"by":11,"text":56},"18873656","Hey HN! Shellvault is a project I've been working hard on for a few months now. It's a cloud service that allows you to SSH from the comfort of any browser similar to Chrome…",{"id":58,"by":11,"text":59},"18873996","Right, Shellvault isn't for everyone: we're aiming to provide a good service for anyone who wants more convenience than normal SSH can provide, and we've worked hard on…",{"value":61,"source":52,"evidence":62},"Independent users needing convenient remote server access",[63,66],{"id":64,"by":11,"text":65},"18876677","Thank you for saying so. We've put a lot of work into just getting to this state, and next for us comes a lot more work on both features and security, like you said. Our focus…",{"id":67,"by":11,"text":68},"18874645","The big one is convenience: if you need to do some quick maintenance from a computer you're not usually using, it's fast and easy to do so here (e.g. if you want to administer…",{"value":70,"source":71,"evidence":72},"Around $5\u002Fmonth per a commenter; free trial requires registration","commenter",[73,77],{"id":74,"by":75,"text":76},"18874520","null_content","Pretty much any device these days can run some form of standalone SSH software or, worst case scenario, a shell + openssh (heck, even Windows can do that these days). Setting…",{"id":78,"by":79,"text":80},"18876337","dzek69","I need to create account to test? No Thanks.",{"value":82,"source":52,"evidence":83},"Convenience of accessing servers from unfamiliar machines",[84],{"id":67,"by":11,"text":68},[86,92,96],{"value":87,"source":52,"evidence":88},"Laravel",[89],{"id":90,"by":11,"text":91},"18873806","Shellvault was developed from scratch with Laravel and Vue.js (the terminal is XTerm.js [1]). One of our big design ideals while developing Shellvault was that setup should be…",{"value":93,"source":52,"evidence":94},"Vue.js",[95],{"id":90,"by":11,"text":91},{"value":97,"source":52,"evidence":98},"XTerm.js",[99],{"id":90,"by":11,"text":91},"unknown","launched",{"praise":103,"objections":118,"requests":161,"questions":191,"alternatives":206},[104,111],{"value":105,"source":71,"evidence":106},"Looks very polished and well designed",[107],{"id":108,"by":109,"text":110},"18876484","tptacek","1. This is very, very cool looking. 2. We would never in a million years sign off on any usage of this at any of our clients. I think there's something of pretty great value…",{"value":112,"source":71,"evidence":113},"Good that the author is open to feedback and improving security",[114],{"id":115,"by":116,"text":117},"18874340","antoineMoPa","I would like something like this, but open source (my inspiration is codebox.io, which is dead). I might code it actually. My goal would be to have an easy editor, file manager…",[119,134,145,153],{"value":120,"source":71,"evidence":121},"Acts as a man-in-the-middle; server sees plaintext and holds private keys",[122,126,130],{"id":123,"by":124,"text":125},"18874396","cntlzw","I don't want to be cynical. There is probably lots and lots of work being put in this project, but.... The business idea is basically this: hand me your credit card, I go to your…",{"id":127,"by":128,"text":129},"18874040","jstanley","> Shellvault uses a websocket to connect a client-side terminal emulator to an SSH process on Shellvault's servers. When you type a command, it goes through the websocket to the…",{"id":131,"by":132,"text":133},"18874376","skywhopper","I can see how this might seem convenient, but using this service would be a really bad idea. The vendor even seems to know this: ``` Sharing your public key is ok, but you should…",{"value":135,"source":71,"evidence":136},"Trust issue with logging claims; cannot verify no logging",[137,141],{"id":138,"by":139,"text":140},"18873834","Jnr","Sorry but I have a trust issue with this kind of service. Saying that you don't log anything is one thing but believing it is something else. Even hosting this kind of web…",{"id":142,"by":143,"text":144},"18879977","alias_neo","This feels like, some people that make cool apps decided to get into security, nothing I've read here makes me believe you really had a security hat on as you made this and that…",{"value":146,"source":71,"evidence":147},"Not suitable for enterprise or internal firewalled servers",[148,152],{"id":149,"by":150,"text":151},"18873970","qmarchi","I think the biggest feedback item for me would be that most of the servers I access are on an internal network and firewalled off from external access. Which is not uncommon when…",{"id":108,"by":109,"text":110},{"value":154,"source":71,"evidence":155},"Existing local SSH clients and Chrome Secure Shell are safer",[156,160],{"id":157,"by":158,"text":159},"18874082","tytso","This is described as \"like Chrome Secure Shell\", but the major difference is that with the Chrome Secure Shell application, the ssh client runs in the browser, so it's actually…",{"id":74,"by":75,"text":76},[162,177,185],{"value":163,"source":71,"evidence":164},"Self-hosted or open source option",[165,169,173],{"id":166,"by":167,"text":168},"18876494","isatty","This should not be a thing, I’m sorry. You’re selling an exploit as a paid service and I don’t even want to take the chance that a junior developer will fall for it. Literally no…",{"id":170,"by":171,"text":172},"18877338","shittyadmin","Maybe consider offering a self-hosted option - even if it's a paid one, it'd be a nice alternative to things like ajaxterm. I actually thought this looked great until I realized…",{"id":174,"by":175,"text":176},"18873920","Aeolun","To be honest, I think I might almost consider using this if it were self-hosted, but even then it would be a fairly scary thing. Giving someone else control over my shell…",{"value":178,"source":71,"evidence":179},"End-to-end encryption with in-browser SSH termination",[180,184],{"id":181,"by":182,"text":183},"18874326","lawl",">is there something about this stack that would let us stop being a middleman? Yes if you terminate the connection in the browser and your server just acts as a TCP\u003C->websocket…",{"id":127,"by":128,"text":129},{"value":186,"source":52,"evidence":187},"Enterprise features like proxy support and key sharing",[188],{"id":189,"by":11,"text":190},"18874051","Thanks for the feedback! This is something we've had in mind for a while, and we're hoping to get to work on enterprise support (including other features like key sharing between…",[192,202],{"value":193,"source":71,"evidence":194},"Does the service log or read commands sent",[195,199],{"id":196,"by":197,"text":198},"18873708","sethammons","Neat looking service. From a security standpoint, it is a bit terrifying that it could be logging everything, no?",{"id":200,"by":11,"text":201},"18874250","Theoretically, yes (see our FAQ [1]), which is why we encourage careful usage. We don't log commands or usage. We actually looked at a browser-only implementation first. Sadly,…",{"value":203,"source":71,"evidence":204},"Can it reach servers behind firewalls",[205],{"id":149,"by":150,"text":151},[207,217,224,231,242,246],{"value":208,"source":71,"evidence":209},"Apache Guacamole",[210,213],{"id":211,"by":11,"text":212},"18874664","For 1, we're going to look into it (or something like it). It sounds like the service could be improved a lot if we could implement end-to-end encryption without the MitM…",{"id":214,"by":215,"text":216},"18873771","Mortiffer","did you-guys reuse any code from https:\u002F\u002Fguacamole.apache.org\u002F or all home grown ?",{"value":218,"source":71,"evidence":219},"Teleport",[220],{"id":221,"by":222,"text":223},"18876836","pmalynin","I mean there is also Teleport (Gravitational) that you could self host and get around most of those issues.",{"value":225,"source":71,"evidence":226},"AWS Cloud9",[227],{"id":228,"by":229,"text":230},"18874658","joecot","You can get something very similar using AWS Cloud9. You can make Cloud9 workspaces that are full IDEs, which also includes terminal access. If you use your Cloud9 workspace as…",{"value":232,"source":71,"evidence":233},"Google Cloud Shell and console SSH",[234,238],{"id":235,"by":236,"text":237},"18877129","maratb","What about using Google Cloud Shell (https:\u002F\u002Fcloud.google.com\u002Fshell\u002Fdocs\u002F; free, open to anyone with a Google account) as a jump host to your servers? Or using GCE's…",{"id":239,"by":240,"text":241},"18879586","manishsharan","I use google cloud console which is also browser based ssh console. Its free with gooogle cloud account. I can then ssh to other servers. So this service makes no sense for me.",{"value":243,"source":71,"evidence":244},"Chrome Secure Shell",[245],{"id":157,"by":158,"text":159},{"value":247,"source":71,"evidence":248},"Butterfly and gotty",[249,253],{"id":250,"by":251,"text":252},"18874181","flarco","Nice. Here is an open-source, self-hosted option: https:\u002F\u002Fgithub.com\u002Fparadoxxxzero\u002Fbutterfly",{"id":254,"by":255,"text":256},"18874701","hsnewman","I use gotty https:\u002F\u002Fgithub.com\u002Fyudai\u002Fgotty, which works great.",{"comments":258,"answered":41,"key":259},17,[260,263,264],{"id":261,"text":262},"18874861","Many other commenters have expressed similar misgivings, but I'll respond to this top-rated one so that I don't pollute the thread. First, thanks for your brutality. It's good to…",{"id":200,"text":201},{"id":265,"text":266},"18874378","Oh, so by \"terminate the connection in the browser\", you mean the service would connect via SSH to a server, start a separate socket server connected to a terminal, and then hand…",{"commenters":268,"max_depth":41,"maker_replies":258,"first_comment_mins":40,"lifespan_hours":269},64,16,[271,273,276,280,283,285,289,291,294,296,300,304,308,310,314,317,320,322,325,326,327,329,332,333,334,336,339,343,347,349,351,354,355,358,361,364,366,368,370,372,375,377,380,383,385,387,390,391,392,394,396,398,399,402,404,406,408,411,413,417,419,422,424,426,429,432,436,438,441,443,444,446,447,449,452,457,460,461,462,463,465,469,472,476,478,480,482,485,488,491,494,496,500,504,506,509,512,514,517,519,521],[123,38,40,272,124,38],"project\u002Fcritical\u002Fprivacy",[274,38,40,272,275,38],"18874740","vectorEQ",[277,38,38,278,279,38],"18874884","commenter\u002Fneutral\u002Fnone","michaelmior",[281,38,38,278,282,38],"18874967","awill",[221,38,40,284,222,38],"project\u002Fcritical\u002Fnone",[286,38,47,287,288,38],"18874908","project\u002Fneutral\u002Fnone","icebraining",[290,38,38,278,275,38],"18875174",[292,38,38,278,293,38],"18875177","progval",[261,38,38,295,11,40],"maker\u002Fneutral\u002Fprivacy",[297,38,40,298,299,38],"18874924","project\u002Fcritical\u002Fidea","shellshook",[301,38,38,302,303,38],"18876151","commenter\u002Fcritical\u002Fnone","omarchowdhury",[305,38,47,306,307,38],"18876540","project\u002Fneutral\u002Fpricing","devoply",[309,38,40,272,299,38],"18876582",[311,38,40,312,313,38],"18877553","project\u002Fcritical\u002Fpricing","xorcist",[315,38,40,298,316,38],"18879044","Skunkleton",[318,38,40,284,319,38],"18880971","rkeene2",[321,38,47,295,275,38],"18875155",[323,38,40,272,324,38],"18876779","wstuartcl",[127,40,40,272,128,38],[200,40,38,295,11,40],[328,40,47,295,128,38],"18874314",[330,40,40,331,324,38],"18876844","maker\u002Fcritical\u002Fnone",[181,40,47,295,182,38],[265,40,38,295,11,40],[335,40,47,295,182,38],"18874438",[337,40,38,338,11,40],"18874498","maker\u002Fneutral\u002Fnone",[340,40,47,341,342,38],"18876971","project\u002Fneutral\u002Fidea","Vendan",[344,40,38,345,346,38],"18877551","other\u002Fneutral\u002Fnone","bronco21016",[348,40,38,278,342,38],"18878345",[350,40,38,278,346,38],"18879091",[352,40,47,295,353,38],"18874595","nickpsecurity",[211,40,38,295,11,40],[356,40,40,331,357,38],"18878986","0x0",[359,40,38,278,360,38],"18874256","invokestatic",[362,40,38,363,128,38],"18874290","commenter\u002Fneutral\u002Fprivacy",[365,40,38,363,360,38],"18874416",[367,40,38,363,128,38],"18874442",[369,40,38,363,360,38],"18875047",[371,40,38,363,128,38],"18875479",[373,40,38,345,374,38],"18877371","seletz",[376,40,38,363,313,38],"18877625",[378,40,40,272,379,38],"18874592","kevin_nisbet",[381,40,40,272,382,38],"18874641","dividuum",[384,40,38,363,288,38],"18874991",[386,40,38,363,382,38],"18876300",[388,31,40,272,389,38],"18874772","matthewaveryusa",[131,47,40,272,132,38],[157,33,40,272,158,38],[393,33,38,295,11,40],"18874328",[142,395,40,272,143,38],5,[138,397,40,272,139,38],6,[58,397,38,338,11,40],[400,397,47,338,401,38],"18875039","freakz",[403,397,38,338,11,40],"18875431",[166,405,40,272,167,38],7,[55,407,38,338,11,40],8,[409,407,47,338,410,38],"18873693","equalunique",[412,407,38,338,11,40],"18873731",[414,407,47,415,416,38],"18879975","project\u002Fmixed\u002Fprivacy","dpedu",[228,418,40,298,229,38],9,[420,41,47,415,421,38],"18874332","cdumler",[174,423,40,272,175,38],11,[425,423,38,278,128,38],"18874046",[427,423,38,363,428,38],"18874678","jachee",[430,423,38,278,431,38],"18878175","cortesoft",[433,423,395,434,435,38],"18874424","project\u002Fpositive\u002Fdesign","Spivak",[437,423,38,278,175,38],"18879610",[439,423,40,298,440,38],"18879643","wmf",[149,442,47,341,150,38],12,[189,442,38,338,11,40],[250,445,40,298,251,38],13,[196,32,40,272,197,38],[448,32,38,295,11,40],"18873779",[450,32,40,272,451,38],"18874271","dsr_",[453,454,40,455,456,38],"18873987",15,"project\u002Fcritical\u002Fdocs","bberenberg",[458,454,38,459,11,40],"18874014","maker\u002Fneutral\u002Fdocs",[74,269,40,272,75,38],[108,258,47,415,109,38],[64,258,38,338,11,40],[464,258,40,298,324,38],"18876864",[466,258,40,467,468,38],"18877077","maker\u002Fcritical\u002Fprivacy","shawkinaw",[470,258,38,278,471,38],"18878137","pugz",[473,258,38,474,475,38],"18881249","other\u002Fneutral\u002Fprivacy","brokenmachine",[235,477,40,272,236,38],18,[479,477,38,363,382,38],"18877179",[481,477,38,363,236,38],"18877394",[483,477,40,298,484,38],"18878182","dtrailin",[115,486,395,487,116,38],19,"project\u002Fpositive\u002Fidea",[489,486,47,341,490,38],"18874482","forsakenharmony",[492,18,40,272,493,38],"18877735","brucemoose",[254,495,40,298,255,38],21,[497,498,40,312,499,38],"18878802",22,"letters90",[501,502,40,298,503,38],"18874199",23,"z3t4",[67,502,38,505,11,40],"maker\u002Fneutral\u002Fidea",[507,502,47,341,508,38],"18876957","tyingq",[170,510,47,511,171,38],24,"project\u002Fmixed\u002Fidea",[239,513,40,298,240,38],25,[78,515,40,516,79,38],26,"project\u002Fcritical\u002Fexecution",[518,515,38,338,11,40],"18876816",[214,520,47,338,215,38],27,[90,520,38,338,11,40],[],[524,529,534,538,543,547],{"id":525,"name":526,"points":527,"category":528},"18902561","HeyFromTheFuture",355,"consumer_social",{"id":530,"name":531,"points":532,"category":533},"18911317","The Plain Contract",299,"productivity",{"id":535,"name":536,"points":537,"category":533},"18872599","JournalBook",268,{"id":539,"name":540,"points":541,"category":542},"18919581","Postmake",197,"dev_tools",{"id":544,"name":545,"points":546,"category":542},"18879209","workstation",155,{"id":548,"name":549,"points":550,"category":20},"18885369","FarmNet",139,false,"v2",{"id":554,"name":5,"line":6,"ai":551,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":555,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":556,"url":9,"mix":557,"praise":105,"objection":120,"sub":21},18873652,[24,25,26,27],"1131311113303100111111311033111111311313",[31,32,33,34],1794036573896]