Shellvault

1. This is very, very cool looking. 2. We would never in a million years sign off on any usage of this at any of our clients. I think there's something of pretty great value…

I would like something like this, but open source (my inspiration is codebox.io, which is dead). I might code it actually. My goal would be to have an easy editor, file manager…

I don't want to be cynical. There is probably lots and lots of work being put in this project, but.... The business idea is basically this: hand me your credit card, I go to your…

> Shellvault uses a websocket to connect a client-side terminal emulator to an SSH process on Shellvault's servers. When you type a command, it goes through the websocket to the…

I can see how this might seem convenient, but using this service would be a really bad idea. The vendor even seems to know this: ``` Sharing your public key is ok, but you should…

Sorry but I have a trust issue with this kind of service. Saying that you don't log anything is one thing but believing it is something else. Even hosting this kind of web…

This feels like, some people that make cool apps decided to get into security, nothing I've read here makes me believe you really had a security hat on as you made this and that…

I think the biggest feedback item for me would be that most of the servers I access are on an internal network and firewalled off from external access. Which is not uncommon when…

1. This is very, very cool looking. 2. We would never in a million years sign off on any usage of this at any of our clients. I think there's something of pretty great value…

This is described as "like Chrome Secure Shell", but the major difference is that with the Chrome Secure Shell application, the ssh client runs in the browser, so it's actually…

Pretty much any device these days can run some form of standalone SSH software or, worst case scenario, a shell + openssh (heck, even Windows can do that these days). Setting…

This should not be a thing, I’m sorry. You’re selling an exploit as a paid service and I don’t even want to take the chance that a junior developer will fall for it. Literally no…

Maybe consider offering a self-hosted option - even if it's a paid one, it'd be a nice alternative to things like ajaxterm. I actually thought this looked great until I realized…

To be honest, I think I might almost consider using this if it were self-hosted, but even then it would be a fairly scary thing. Giving someone else control over my shell…

>is there something about this stack that would let us stop being a middleman? Yes if you terminate the connection in the browser and your server just acts as a TCP<->websocket…

> Shellvault uses a websocket to connect a client-side terminal emulator to an SSH process on Shellvault's servers. When you type a command, it goes through the websocket to the…

Thanks for the feedback! This is something we've had in mind for a while, and we're hoping to get to work on enterprise support (including other features like key sharing between…

Neat looking service. From a security standpoint, it is a bit terrifying that it could be logging everything, no?

Theoretically, yes (see our FAQ [1]), which is why we encourage careful usage. We don't log commands or usage. We actually looked at a browser-only implementation first. Sadly,…

I think the biggest feedback item for me would be that most of the servers I access are on an internal network and firewalled off from external access. Which is not uncommon when…

For 1, we're going to look into it (or something like it). It sounds like the service could be improved a lot if we could implement end-to-end encryption without the MitM…

did you-guys reuse any code from https://guacamole.apache.org/ or all home grown ?

I mean there is also Teleport (Gravitational) that you could self host and get around most of those issues.

You can get something very similar using AWS Cloud9. You can make Cloud9 workspaces that are full IDEs, which also includes terminal access. If you use your Cloud9 workspace as…

What about using Google Cloud Shell (https://cloud.google.com/shell/docs/; free, open to anyone with a Google account) as a jump host to your servers? Or using GCE's…

I use google cloud console which is also browser based ssh console. Its free with gooogle cloud account. I can then ssh to other servers. So this service makes no sense for me.

This is described as "like Chrome Secure Shell", but the major difference is that with the Chrome Secure Shell application, the ssh client runs in the browser, so it's actually…

Nice. Here is an open-source, self-hosted option: https://github.com/paradoxxxzero/butterfly

I use gotty https://github.com/yudai/gotty, which works great.