Thread: Ssh
View Single Post
Estel's Avatar
Posts: 5,028 | Thanked: 8,613 times | Joined on Mar 2011
#15
Originally Posted by Addison View Post
^ So to keep things simple, X Forwarding would let my play the default Solitaire game from my Windows XP on my tablet?

Ooh.
Exactly the opposite - You view Your N900 application on other machine (linux with X based - native, windows - using special "client", which is in fact X server, no need to get into details before You already check how it works ). Thats why it's called 'X forwarding over SSH' - You can achieve it without virtual desktop, in fact You're just forwarding one program, not whole desktop. Got some advantages and disadvantages over VNC (most common Open standard for virtual desktop) and RDP (Remote Desktop Protocol - semi-open w$ndoze standard, capable of faster user experience while doing basic operations on files etc, but unable to project advanced applications like directx/opengl related. RDP is also possible on linux using special packages)

Take this with a grain of salt, as it's purely theoretical knowledge, I've never used X forwarding over SSH myself.

Important note - OpenSSH package for Maemo lacks some improvements of security - basically, reaction to exploits presented in late 2009, compromising -cbc encryptions in some cases. Prior to that, -cbc was default choice, it was replaced with ,-ctr in correct order of preferences. Of course, if one is feeling paranoical, banning -cbc as whole is also an option, although keeping them as fallback seems sane, due to specific and non-trivial nature of exploiting them (so, in environment controlled by Yourself, You use -ctr, because Your both machines support it and it's higher on client preferences list, but You retain possibility of connecting to other servers, that don't support ctr).

IIRC, 'Ciphers' in /etc/ssh/ssh_config should look like that, for best security and compatibility at the same time:
Code:
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,blowfish-cbc,3des-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour
/Estel
__________________
N900's aluminum backcover / body replacement
-
N900's HDMI-Out
-
Camera cover MOD
-
Measure battery's real capacity on-device
-
TrueCrypt 7.1 | ereswap | bnf
-
Hardware's mods research is costly. To support my work, please consider donating. Thank You!