I tried JuiceSSH as an android ssh app. ... / 2013-09-07

2013-09-07 I tried JuiceSSH as an android ssh app. ...
I tried JuiceSSH as an android ssh app. It has a better on-screen keyboard than ConnectBot.

But. JuiceSSH promotes insecure use of SSH. JuiceSSH keeps the login-name, private key file and password together as an identity which can be used for multiple connections. I haven't used the option to save passwords as I don't use passwords for SSH connections. It offers to save the passphrase for a key when asking for it. I tapped this option by accident and found out it still asked for nothing when using the same connection the next day. Forgetting the remembered passphrase was only possible by removing the identity completely and recreating it, which also unlinks it from all connections.

I consider laptops, tablets and other portable devices easily stolen so this kind of insecure behaviour scares me. Back to ConnectBot and removing the public half of the key I generated for JuiceSSH from all systems.

Tags: ,

IPv6 check

Running test...
, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred. PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers

RSS
Meningen zijn die van mezelf, wat ik schrijf is beschermd door auteursrecht. Sommige publicaties bevatten een expliciete vermelding dat ze ongevraagd gedeeld mogen worden.
My opinions are my own, what I write is protected by copyrights. Some publications contain an explicit license statement which allows sharing without asking permission.
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated by $Id: newsitem.cgi,v 1.55 2021/11/09 13:09:49 koos Exp $ in 0.005920 seconds.