Are free public shells for ssh tunneling safe?


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Are free public shells for ssh tunneling safe?
# 1  
Old 11-01-2010
Are free public shells for ssh tunneling safe?

Is it secure to use free shells for ssh tunneling? Can the shell provider see and log the sites I visit and passwords I enter?

I'm new to this thing and couldn't find info on google Smilie
# 2  
Old 11-01-2010
No, once you set the key, they are locked out.

You should get your ssh code from trustworth sources, as hackers can easily modify open source from trap doors. This applies to all downloads! Beware of odd binary code sources.

I believe ssh2 is both free and stronger. If you do a little man page reading, you can find out how to maximize your key size. This is especially important when you do passwordless PK access, where the key password is blank. I believe ther are even tools out there to embed the key's password in a running session, so it can be proffered by your avatar at approriate moments to unlock your key. BTW, the keys are just used a short while, to start up the connection session, and then a random session key runs the session for a longer time before a new key is negotiated.
This User Gave Thanks to DGPickett For This Post:
# 3  
Old 11-01-2010
Quote:
Originally Posted by rafunk
Is it secure to use free shells for ssh tunneling? Can the shell provider see and log the sites I visit and passwords I enter?
No, it is not "secure", relatively speaking.

A free sshd server is an "unknown" server and you don't know if the sshd server code has been modified.

If you want to create a "secure ssh tunnel" you need to set up the sshd server used for tunneling with code you trust.

Using a third party free sshd server is not secure at all because you don't know anything about how sshd was set up (or modified) on the free sshd server.
This User Gave Thanks to Neo For This Post:
# 4  
Old 11-01-2010
I'm not sure I understood you guys Smilie

To clarify, by public shell I meant a shell for which you can sign up on certain websites for free. You signup and then you can use your personal login and password to access the shell.

I need such shell solely for the purpose of ssh tunneling for safe browsing and to access domains which are blocked by my ISP.

I read this somewhere: "sshd (SSH Daemon) is the daemon program for ssh(1). Together these programs ... provide secure encrypted communications between two untrusted hosts over an insecure network."

As I understood neither my ISP nor the shell provider can eavesdrop and log which sites I'm browsing and what passwords I enter when I use ssh tunneling or not?
# 5  
Old 11-01-2010
Quote:
Originally Posted by rafunk
To clarify, by public shell I meant a shell for which you can sign up on certain websites for free. You signup and then you can use your personal login and password to access the shell.
I understood exactly what you mean by a free shell account.

On these accounts, you don't have superuser permissions and you did not install and compile sshd yourself. This means you don't know what sshd is doing.

In addition, when you set up an ssh connection between your client and the free shell server, only the connection is secure between the end points of the sockets.

This means that the superuser on the free server could, in theory, log and read your messages, if they wanted to with a simple code mod.

If you want "security" you need to have control over the "box in the middle" or you will be subject to a variation of what is called "the man in the middle attack".

Of course "secure" is relative, and if you don't care if the superuser on the free shell server can track your web surfing, then ...... it does not matter. I simply answered your question correctly, that it is not "secure" to use a third party server that you don't have superuser privs on the box.
This User Gave Thanks to Neo For This Post:
# 6  
Old 11-01-2010
Quote:
Originally Posted by Neo
I understood exactly what you mean by a free shell account.

On these accounts, you don't have superuser permissions and you did not install and compile sshd yourself. This means you don't know what sshd is doing.

In addition, when you set up an ssh connection between your client and the free shell server, only the connection is secure between the end points of the sockets.

This means that the superuser on the free server could, in theory, log and read your messages, if they wanted to with a simple code mod.

If you want "security" you need to have control over the "box in the middle" or you will be subject to a variation of what is called "the man in the middle attack".

Of course "secure" is relative, and if you don't care if the superuser on the free shell server can track your web surfing, then ...... it does not matter. I simply answered your question correctly, that it is not "secure" to use a third party server that you don't have superuser privs on the box.
Ah, I understand now, thank you very much for the answer Smilie
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Query regarding PuTTY SSH Tunneling

I have a process running on my local server. http://dev.techx.com:6060/proct I wish to block port 6060 and expose port 7777 to the outside world. I block port 6060 and open port 7777 on the firewall. What should be the PuTTY Settings -> Connection -> SSH -> Tunnels 1. Destination ... (3 Replies)
Discussion started by: mohtashims
3 Replies

2. UNIX for Dummies Questions & Answers

Ssh tunneling

I want to perform ssh tunnelling for which I have been using PuTTy. Config is as follows: Host IP: 172.XX.XX.111Port: 22Tunnel setting source port: 19005Destination: 172.XX.XX.40:1521After entering my user ID and password, I am able to see in my command prompt that 127.0.0.1:19005 is listening.... (1 Reply)
Discussion started by: aakashsoor
1 Replies

3. UNIX for Advanced & Expert Users

Server access for SSH Tunneling!

Hi! I came to know about SSH Tunneling to bypass the Firewall. I will have to setup a free access SSH server to tunnel data access through PUTTY or OpenSSH. The problem is that I don't know about any free access servers. So, can anyone of you guide me for that, for any type of help? (1 Reply)
Discussion started by: nixhead
1 Replies

4. UNIX for Dummies Questions & Answers

SSH port forwarding/tunneling

So this seems like something that should be simple...but I can't quite seem to get it up and running. I have a machine, .107 with a GUI on port 8443. The problem is that I can't connect directly to .107 from my laptop. Now I have another machine, .69 that can connect to .107. So shouldn't I be able... (4 Replies)
Discussion started by: DeCoTwc
4 Replies

5. Shell Programming and Scripting

What are public keys in ssh and how do we create the public keys??

Hi All, I am having knowledge on some basics of ssh and wanted to know what are the public keys and how can we create and implement it in connecting server. Please provide the information for the above, it would be helpful for me. Thanks, Ravindra (1 Reply)
Discussion started by: ravi3cha
1 Replies

6. Infrastructure Monitoring

Tunneling UDP via SSH

Performing UDP tunneling through an SSH connection Found this while looking for a way to temporarily forward SNMP requests across otherwise disconnected networks. Might be useful for someone else, too. (1 Reply)
Discussion started by: pludi
1 Replies

7. UNIX for Advanced & Expert Users

tunneling commands and file transfers through established ssh connection

Hi - I frequently run commands, and transfer files to/from a host that uses SecurID ssh authentication. It is a real pain to have to enter the authentication information every time I want to interact with this host. I am wondering if there is a way to establish a one-time ssh connection to this... (2 Replies)
Discussion started by: cpp6f
2 Replies

8. Filesystems, Disks and Memory

Tunneling NFS through SSH????

Hello Folks, Im trying to pass the NFS Shared data through the SSH tunnel. Following are the Steps for my Executions: A) Commands Executed on Server (NFS Server + SSHD Server running) i) share -F nfs -o rw=<NFS Server IP> /home ii) Start the NFS Server Services and SSHD Services. ... (3 Replies)
Discussion started by: ImpeccableCode
3 Replies

9. UNIX for Advanced & Expert Users

SSH Tunneling

Hi all question - there are 2 servers A + B. server A is connected to the internet and running a squid proxy server - server B is behind a firewall. I can ssh from A to B but not from B to A. I need internet access on B to update some files. I thought I could use some sort of ssh tunnel to... (1 Reply)
Discussion started by: silvaman
1 Replies

10. Solaris

ssh tunneling

Hi, I have tried the following: on PC1 (win xp) I have created ssh connection with port forwarding (local 8888 to remote 8888) to server1. >From server1 I have created another ssh connection with port forwarding to server2(local 8888 to remote 1521). When I try to connect to oracle... (3 Replies)
Discussion started by: goran00
3 Replies
Login or Register to Ask a Question