|
|
Sponsored Content
Top Forums
Shell Programming and Scripting
Are free public shells for ssh tunneling safe?
Post 302468106 by rafunk on Monday 1st of November 2010 04:18:29 PM
11-01-2010
Quote:
I understood exactly what you mean by a free shell account.
On these accounts, you don't have superuser permissions and you did not install and compile sshd yourself. This means you don't know what sshd is doing.
In addition, when you set up an ssh connection between your client and the free shell server, only the connection is secure between the end points of the sockets.
This means that the superuser on the free server could, in theory, log and read your messages, if they wanted to with a simple code mod.
If you want "security" you need to have control over the "box in the middle" or you will be subject to a variation of what is called "the man in the middle attack".
Of course "secure" is relative, and if you don't care if the superuser on the free shell server can track your web surfing, then ...... it does not matter. I simply answered your question correctly, that it is not "secure" to use a third party server that you don't have superuser privs on the box.
On these accounts, you don't have superuser permissions and you did not install and compile sshd yourself. This means you don't know what sshd is doing.
In addition, when you set up an ssh connection between your client and the free shell server, only the connection is secure between the end points of the sockets.
This means that the superuser on the free server could, in theory, log and read your messages, if they wanted to with a simple code mod.
If you want "security" you need to have control over the "box in the middle" or you will be subject to a variation of what is called "the man in the middle attack".
Of course "secure" is relative, and if you don't care if the superuser on the free shell server can track your web surfing, then ...... it does not matter. I simply answered your question correctly, that it is not "secure" to use a third party server that you don't have superuser privs on the box.
|
|
10 More Discussions You Might Find Interesting
1. Solaris
Hi,
I have tried the following:
on PC1 (win xp) I have created ssh connection with port forwarding
(local 8888 to remote 8888) to server1.
>From server1 I have created another ssh connection with port
forwarding to server2(local 8888 to remote 1521).
When I try to connect to oracle... (3 Replies)
Discussion started by: goran00
3 Replies
2. UNIX for Advanced & Expert Users
Hi all
question -
there are 2 servers A + B. server A is connected to the internet and running a squid proxy server - server B is behind a firewall. I can ssh from A to B but not from B to A. I need internet access on B to update some files. I thought I could use some sort of ssh tunnel to... (1 Reply)
Discussion started by: silvaman
1 Replies
3. Filesystems, Disks and Memory
Hello Folks,
Im trying to pass the NFS Shared data through the SSH tunnel. Following are the Steps for my Executions:
A) Commands Executed on Server (NFS Server + SSHD Server running)
i) share -F nfs -o rw=<NFS Server IP> /home
ii) Start the NFS Server Services and SSHD Services.
... (3 Replies)
Discussion started by: ImpeccableCode
3 Replies
4. UNIX for Advanced & Expert Users
Hi - I frequently run commands, and transfer files to/from a host that uses SecurID ssh authentication. It is a real pain to have to enter the authentication information every time I want to interact with this host. I am wondering if there is a way to establish a one-time ssh connection to this... (2 Replies)
Discussion started by: cpp6f
2 Replies
5. Infrastructure Monitoring
Performing UDP tunneling through an SSH connection
Found this while looking for a way to temporarily forward SNMP requests across otherwise disconnected networks. Might be useful for someone else, too. (1 Reply)
Discussion started by: pludi
1 Replies
6. Shell Programming and Scripting
Hi All,
I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server.
Please provide the information for the above, it would be helpful for me.
Thanks,
Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies
7. UNIX for Dummies Questions & Answers
So this seems like something that should be simple...but I can't quite seem to get it up and running. I have a machine, .107 with a GUI on port 8443. The problem is that I can't connect directly to .107 from my laptop. Now I have another machine, .69 that can connect to .107. So shouldn't I be able... (4 Replies)
Discussion started by: DeCoTwc
4 Replies
8. UNIX for Advanced & Expert Users
Hi!
I came to know about SSH Tunneling to bypass the Firewall.
I will have to setup a free access SSH server to tunnel data access through PUTTY or OpenSSH.
The problem is that I don't know about any free access servers.
So, can anyone of you guide me for that, for any type of help? (1 Reply)
Discussion started by: nixhead
1 Replies
9. UNIX for Dummies Questions & Answers
I want to perform ssh tunnelling for which I have been using PuTTy. Config is as follows:
Host IP: 172.XX.XX.111Port: 22Tunnel setting source port: 19005Destination: 172.XX.XX.40:1521After entering my user ID and password, I am able to see in my command prompt that 127.0.0.1:19005 is listening.... (1 Reply)
Discussion started by: aakashsoor
1 Replies
10. Shell Programming and Scripting
I have a process running on my local server.
http://dev.techx.com:6060/proct
I wish to block port 6060 and expose port 7777 to the outside world.
I block port 6060 and open port 7777 on the firewall.
What should be the PuTTY Settings -> Connection -> SSH -> Tunnels
1. Destination ... (3 Replies)
Discussion started by: mohtashims
3 Replies
LEARN ABOUT LINUX
ssh-import-id
ssh-import-id(1) ssh-import ssh-import-id(1) NAME
ssh-import-id - retrieve one or more public keys from a public keyserver (Launchpad.net by default) and append them to the current user's authorized_keys file (or some other specified file) SYNOPSIS
ssh-import-id [options] USER_ID_1 [USER_ID_2] ... [USER_ID_n] OPTIONS
-h | --help usage -o | --output F write output to file 'F' (default ~/.ssh/authorized_keys, use "-" for standard out) DESCRIPTION
This utility will securely contact a public keyserver (https://launchpad.net by default) and retrieve one or more user's public keys, and append these to the current user's ~/.ssh/authorized_keys file. The system administrator can change the source URL used by ssh-import-id(1) by editing the configuration file, /etc/ssh/ssh_import_id, which is sourced to obtain the value of URL. By default, URL="https://launchpad.net/~%s/+sshkeys". Note that this url really MUST be a secure, https url with a valid, signed certificate or else your system will be vulnerable to man-in-the-middle attacks! The "%s" will be populated by ssh-import-id(1) with the value(s) of USER_ID_1 [USER_ID_2] ... [USER_ID_n]. SEE ALSO
ssh(1) FILES
/etc/ssh/ssh_import_id AUTHOR
This manpage and the utility was written by Dustin Kirkland <kirkland@canonical.com> for Ubuntu systems (but may be used by others). Per- mission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 3 published by the Free Software Foundation. On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL. ssh-import 23 Feb 2010 ssh-import-id(1)