Hacker Read

Scarbutt | karma 1633 | avg karma 0.85 · 2019-06-06 21:28:01+00:00

Maybe an agent that just syncs would be a better option (for desktop), so users can keep using their preferred terminal.

Interesting that it is a YC startup.

reply

rkudiyarov | karma 96 | avg karma 3.2 · 2019-06-06 21:39:03+00:00

You can use Termius CLI that syncs the data to your machine and enable working with it in the terminal https://docs.termius.com/termius-cli/termius-cli

SanchoPanda | karma 605 | avg karma 2.32 · 2019-06-06 22:03:04+00:00

I didn't know this existed, thanks,

jamesponddotco | karma 949 | avg karma 3.22 · 2019-06-07 02:38:34+00:00

Hm, seems like it stores SSH key passwords in plain text?

https://github.com/Crystalnix/termius-cli/issues/132

Any comment on that?

reply

rkudiyarov | karma 96 | avg karma 3.2 · 2019-06-07 05:16:46+00:00

Yes, that is user's home directory, e.g., SSH keys in ~/.ssh are also plain text.

jamesponddotco | karma 949 | avg karma 3.22 · 2019-06-07 00:21:48

Not their passwords, tho. I am not trying to be difficult here, just trying to understand the reasoning behind leaving the passwords stored in plain text.

rkudiyarov | karma 96 | avg karma 3.2 · 2019-06-07 01:14:10

We found no way to store password somehow else as Keychains are platform specific, but we plan to add Keychain support in the future.

Terretta | karma 18480 | avg karma 2.96 · 2019-06-07 05:50:59

If you used ‘platform specific’ built-in secrets sync you’d be done... but then how would you justify charging for the built in sync? So I see your conundrum.

__david__ | karma 6442 | avg karma 3.05 · 2019-06-07 10:27:56+00:00

> …SSH keys in ~/.ssh are also plain text.

What? Mine aren't, nor have they ever been…

If you are storing ssh private keys on disk without a password you are doing something wrong.

reply

icebraining | karma 48925 | avg karma 2.14 · 2019-06-07 10:45:50+00:00

If someone can read the files in .ssh, chances are they can also add an alias to the ssh command that steals your passphrase. As for the "stolen laptop" scenario, whole disk encryption is preferable.

SanchoPanda | karma 605 | avg karma 2.32 · 2019-06-06 21:52:41+00:00

My dot files are valuable to me, and I have struggled with a number of different systems for managing them across devices. I feel less attached to the terminal emulator itself, and switch peridocially as different programs interact weirdly with different terminals. Especially on WSL.

Secure effective syncing would give me the valuable thing, while still having the freedom to bounce around terminals.

For context, I currently use termius on ipad, but use termux on android and flavor of the week on desktop, currently WSLtty. I have used the pro version of termius in the past, but do not currently.

reply