Sshx
Dev tools
collaborative terminal
SHOW HN2023
242points
62comments
#204of 3,109 in 2023
Top 7%of 2023 by points
How HN took it
MixedNo clear lean
6 positive, 13 neutral or asking, 0 mixed, 9 critical, out of 28 comments about the project. Thread score +0.04.
Privacy: 0 for, 8 againstIdea: 3 for, 0 againstExecution: 0 for, 1 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Great user experience and a fun, useful idea for shared terminals
From 3 comments
Tried it out. This is a fantastic user experience. Great job!
andelink on HNThis is one of the coolest things I've seen in a while. I'm gonna find a way to try this out TODAY.
hiAndrewQuinn on HNWeb developers live in the web, but we still need to interface with VMs over SSH. Bridging that gap in favor of the developer is genius. The multiplayer aspect, the shell…
teaearlgraycold on HN
Useful for teaching and pair programming
From 2 comments
Super cool. Our students are using ttdy[0] and tmux for providing shared access to a configured environment, but your solution seems much more flexible :) I'm going to start…
ciberado on HNTmate is amazing, highly recommended. It's my favorite way to do pair programming.
stavros on HN
Objections
Encryption design concerns: IV handling, no integrity protection with AES-CTR alone
From 3 comments
I suspect the encryption here is broken due to CTR mode AES with IV reuse. Try printing out the IV in the segment function. It's the same value across sessions. Another thing I…
throwaway81733 on HN> I suspect the encryption here is broken due to CTR mode AES with IV reuse. Try printing out the IV in the segment function. It's the same value across sessions. I think it's a…
d-z-m on HN> Thanks for the comment, happy to elaborate. You're correct that the IVs are not reused. Perhaps you can elaborate a little more on this? For subsequent calls to the segment()…
d-z-m on HN
Argon2id parameters considered too weak
From 2 comments
> I suspect the encryption here is broken due to CTR mode AES with IV reuse. Try printing out the IV in the segment function. It's the same value across sessions. I think it's a…
d-z-m on HN> Thanks for the comment, happy to elaborate. You're correct that the IVs are not reused. Perhaps you can elaborate a little more on this? For subsequent calls to the segment()…
d-z-m on HN
Unauthenticated access via URL is risky
From 2 comments
Lol, wait, people are letting a random website control their terminal, and there's no authentication? Wondering now if I should create a website that's just storage for your ssh…
throwawaaarrgh on HNIf you give someone a link they can access your terminal right? Then none of the rest matters. A URL isn't a secret. Hence it's unathenticated remote access. Which is nuts. Every…
throwawaaarrgh on HN
curl | sh installation is risky without verification
From 2 comments
why don’t those risky “curl | sh” commands at least do some checksum or sig verification?
quickthrower2 on HNI love how it's a self-proclaimed "secure web-based, collaborative terminal" but the installation instructions are the exact opposite. Never blindly execute files without looking…
panki27 on HN
Requests
Read-only viewing and restrictions on remote parties
From 1 comment
Very cool! Would love to see the ability to restrict remote parties, both for read-only viewing and from opening additional terminals.
jpeeler on HN
Comparison with alternatives in the readme
From 1 comment
Have you considered adding a section to the readme comparing Sshx to these well-known alternatives?
minerva23 on HN
Questions
Whether sixel is supported
From 1 comment
Extremely cool. Do the terminal emulators support sixel?
alchemist1e9 on HN
Whether it uses authorized_keys
From 1 comment
This is pretty interesting if it's secure.. does it use regular .ssh/authorized_keys (works with Userify?)
throwawayapples on HN
Alternatives named
tmux
From 1 comment
Or tmux. I guess neither are as intuitive as clickable buttons though.
vulcan01 on HN
GNU screen
From 1 comment
You can share the same terminal session to multiple ssh connections with gnu screen btw.
nolist_policy on HN
tmate
From 1 comment
I'll plug https://tmate.io/ as well, its incredibly handy
gooseyard on HN
GoTTY
From 1 comment
I’ve been using GoTTY (https://github.com/yudai/gotty) to do the same thing, combined with ngrok or Cloudflare tunnels to get a publically accessible URL. To enable multiplayer…
arjvik on HN
ttyd
From 1 comment
Super cool. Our students are using ttdy[0] and tmux for providing shared access to a configured environment, but your solution seems much more flexible :) I'm going to start…
ciberado on HN