Most active commenters

    ←back to thread

    SSH into private machines from anywhere using Cloudflare Tunnel

    (orth.uk)
    319 points SpaghettiX | 14 comments | 10 Feb 22 09:18 UTC | HN request time: 0.84s | source | bottom
    1. jdrc ◴[10 Feb 22 11:22 UTC] No.30284748[source]▶
    Can we stop posting stuff that makes even more people give the keys of their house to the BigCorp cartel?
    replies(8): >>30284849 #>>30284922 #>>30285144 #>>30286205 #>>30286470 #>>30288442 #>>30289673 #>>30290736 #
    2. ◴[10 Feb 22 11:37 UTC] No.30284849[source]▶
    3. iso1210 ◴[10 Feb 22 11:50 UTC] No.30284922[source]▶
    Most people here work for BigCorp cartel or aspire to do so
    replies(2): >>30285320 #>>30285329 #
    4. sneak ◴[10 Feb 22 12:21 UTC] No.30285144[source]▶
    This configured system, unlike the rest of the way CloudFlare works with http, is actually end to end encrypted.
    replies(1): >>30285251 #
    5. password4321 ◴[10 Feb 22 12:40 UTC] No.30285251[source]▶
    Maybe an improvement:

    s/http/https/

    -or-

    s/http/SSL/

    since http is technically often referring to unencrypted port 80 transport.

    6. zitsarethecure ◴[10 Feb 22 12:50 UTC] No.30285320[source]▶
    That's unfair! Many of us also own stock in them.
    7. throwaway984393 ◴[10 Feb 22 12:51 UTC] No.30285329[source]▶
    I'd take a big pay cut to work for a co-op, green energy focused or other social/ecological good company. I just don't wanna work for a startup.
    8. api ◴[10 Feb 22 14:12 UTC] No.30286205[source]▶
    Hacker News hasn't been very "hacker" in a long time. Still a decent place for tech news.
    9. est ◴[10 Feb 22 14:31 UTC] No.30286470[source]▶
    the cf tunnel key was separate than your sshd key, there is no leak here. It's just a way of port forwarding upon a CDN network.
    10. nexuist ◴[10 Feb 22 16:22 UTC] No.30288442[source]▶
    Why is it always the free software people who are the most judgemental about what I do with my software and who I trust with my time and money? AWS and Microsoft never gave a shit about what other vendors I'm in bed with.

    I like your GNU license, I do not like your GNU license people.

    replies(2): >>30288740 #>>30339510 #
    11. downrightmike ◴[10 Feb 22 16:40 UTC] No.30288740[source]▶
    The crazy thing the OSS people have been right about the invasion of privacy and money grab of the modern internet.
    12. qbasic_forever ◴[10 Feb 22 17:35 UTC] No.30289673[source]▶
    What are you giving Cloudflare here? You're running a tunnel daemon and piping a network process to it. There's no exchange of for example your private SSH keys.

    If anything this is letting people more easily self host their own version of 'BigCorp cartel' apps like mail, code hosting, etc.

    13. pmarreck ◴[10 Feb 22 18:51 UTC] No.30290736[source]▶
    Sure. Just make IPv6 work everywhere flawlessly, and then all of our devices can easily access all of our other devices, we can use whatever DNS scheme we want to return the IPv6 addresses to those devices, and then we won't need to punch through NAT firewalls and routers to reflect off corp-owned servers just to access machines trapped behind NAT firewalls! What could possibly go wrong?
    14. ric2b ◴[14 Feb 22 22:50 UTC] No.30339510[source]▶
    The free software people care about your privacy, AWS and Microsoft don't.

    They're not forcing you to do anything, just giving you advice.