maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   IRC on the N900? (https://talk.maemo.org/showthread.php?t=35720)

davost 2009-12-03 00:38

Re: IRC on the N900?
 
Hey, let's say we disagree on some things. And leave the rest of the discussion to future thread where it isn't off topic.

As a conclusion though. If I find that I frequently need to access my home computer when I'm on the go. Well then I would open up my router for ssh. But for IRC which could be run as a client on the phone itself? I just think you are better of with a defensive approach to security. And "a one-in-a-million event" of SSH getting cracked? I would say a one-in-fifty event, and still worry that I underestimate the risk.

detective 2009-12-03 01:08

Re: IRC on the N900?
 
Quote:

Originally Posted by hqh (Post 405691)
Irssi appears to be already in extras-devel. I haven't tried it though, as I prefer to use IRC over ssh on a remote machine.

now in extra-testing, feel free to test and help me to get this wonderful piece of software ported well

http://maemo.org/packages/package_in...irssi/0.8.14-1

note: you can switch with ctrl+n or ctrl+p from one to another window, don't ask how you can switch to windownumber x.
i did not binded it, reason: everyone think that his opinon of mapping the keys right is the best. it's irssi, so feel free to bind your keys like YOU want :)

dick-richardson 2009-12-03 01:30

Re: IRC on the N900?
 
Quote:

Originally Posted by davost (Post 406140)
Granted, ssh is very useful, I use it a lot. But I only have it enabled when and where I really need it. As a matter of fact you are not really safe. Just consider TLS. The foundation of almost all web security. That was considered safe until the renogatiation weakness was discovered not many months ago.

The renegotiation exploit doesn't give a man in the middle your private key and has absolutely NO impact on the security of ssh in this context.

The renegotiation exploit allows a man in the middle to establish their own valid ssl connection (NOT ssh) to a server that accepts public requests, and then forward your new attempt as a renegotiation.

ewan 2009-12-03 01:52

Re: IRC on the N900?
 
Quote:

Originally Posted by CrashandDie (Post 406162)
Actually, the "one username only makes it secure" is a myth. A username isn't a secret, and it shouldn't be treated as one. Yes, my username on my boxes is "slauwers". Yes, my boxes are exposed to the wild wild web.

It's perfectly true in principle that username's aren't a secret, but in practice the attacks I usually see are dumb dictionary attacks, not targetted thoughtful ones; if you've got systems that need to allow password auth then limiting the available usernames does reduce the chance of one of them getting a lucky hit. If you're keys only then it doesn't make much difference, but then I've had a machine that I thought was set to keys only get compromised because it turned out not to be, and a dictionary attack did get lucky.

As a rule I like a security setup that can take the occasional balls-up without falling to pieces.

Quote:

Originally Posted by davost (Post 406330)
As a conclusion though. If I find that I frequently need to access my home computer when I'm on the go. Well then I would open up my router for ssh. But for IRC which could be run as a client on the phone itself?

Not as well though. Your phone's likely to be hopping from network to network as you move around and that will break open tcp connections. With irssi running in screen on a machine with a stable connection your IRC session keeps running - you need to reconnect to it, but it doesn't keep popping on and off IRC. Aside from being generally more friendly that means that it captures conversation that takes place while you're disconnected, so you can catch up when you're back online.

Quote:

I just think you are better of with a defensive approach to security. And "a one-in-a-million event" of SSH getting cracked? I would say a one-in-fifty event, and still worry that I underestimate the risk.
Seriously - one in fifty what? SSH in general and OpenSSH in particular is open to the internet on an enormous number of machines and has been for a long time. It's a hugely high profile target, and has an excellent track record of security.

fnordianslip 2009-12-03 02:27

Re: IRC on the N900?
 
Quote:

Originally Posted by ewan (Post 406443)
Seriously - one in fifty what? SSH in general and OpenSSH in particular is open to the internet on an enormous number of machines and has been for a long time. It's a hugely high profile target, and has an excellent track record of security.

Er, debian :eek:

dick-richardson 2009-12-03 02:32

Re: IRC on the N900?
 
Quote:

Originally Posted by fnordianslip (Post 406496)
Er, debian :eek:

Are you referring to the vulnerability that led to a certain percentage of ssh keys that were easier to brute-force than others and was fixed within the week with no known loss?

fnordianslip 2009-12-03 02:39

Re: IRC on the N900?
 
Quote:

Originally Posted by dick-richardson (Post 406506)
Are you referring to the vulnerability that led to a certain percentage of ssh keys that were easier to brute-force than others and was fixed within the week with no known loss?

Yes, precisely. You seem to be impressed by the fact that it was fixed. I suppose that's what you get from hanging around here :)

I was mostly poking fun at the actual cause of the problem.

MaxiKana 2009-12-05 12:05

Re: IRC on the N900?
 
After using Irssi since getting the tip in this thread I have come to the conclusion that irssi must be quite a power hog. Having 3g on, WLAN off, bluetooth off, gps off and no widgets on the desktop but irssi on all the time my battery drains in 7-8 hours. After charging my phone I'm going to run one battery cycle without irssi on to see if it still drains the battery as fast.

As a potential sollution I'm already looking at getting a dd-wrt compatible wlan router instead of the one I have now so that I can install irssi on it and ssh to the router with my phone. My friends running irssi on his server and is sshing to it with his n900, he had it on last night (10 hours) and it drained only 15% of his battery.

Anyone else with simmilar experience?

joppu 2009-12-05 16:02

Re: IRC on the N900?
 
Quote:

Originally Posted by davost (Post 406330)
Hey, let's say we disagree on some things. And leave the rest of the discussion to future thread where it isn't off topic.

As a conclusion though. If I find that I frequently need to access my home computer when I'm on the go. Well then I would open up my router for ssh. But for IRC which could be run as a client on the phone itself? I just think you are better of with a defensive approach to security. And "a one-in-a-million event" of SSH getting cracked? I would say a one-in-fifty event, and still worry that I underestimate the risk.

Because you'll be able to continue your IRC sessions everywhere, on your work computer, home computer, laptop, N900, S60 smartphone.And without any reconnecting and join/quit spam for other users. It'll also collect all your private messages and also all other conversations.

Use a strong password, or even better, a keypair.

anttu 2009-12-13 19:29

Re: IRC on the N900?
 
Quote:

Originally Posted by MaxiKana (Post 411454)
As a potential sollution I'm already looking at getting a dd-wrt compatible wlan router instead of the one I have now so that I can install irssi on it and ssh to the router with my phone. My friends running irssi on his server and is sshing to it with his n900, he had it on last night (10 hours) and it drained only 15% of his battery.

Anyone else with simmilar experience?

I have an Asus WL-500W with dd-wrt keeping up my irssi in screen, and it is really really nice. Now I have a new N900 and of course I ssh with it to the Asus, screen and irssi.

There is two problems with using irssi with N900: (Could someone help with these.)

- No Alt key - Is this somehow doable?
- Scandinavian characters missing - how can I get them work?


All times are GMT. The time now is 10:10.

vBulletin® Version 3.8.8