Depends what you mean by setting up ssh. Installing sshd, sure. Opening up ports, calling your isp to buy dedicated ip if they even offer one, getting a domain, setting up ddns…
- 17 Posts
- 222 Comments
That’s why you should never change your password. No one will think to guess @utumn2O23 in 2026.
That’s not always an option and when it is, setting it up is often more complicated and less secure than using a relay server. Honestly, the fastest (to setup), easiest and most secure option would be ssh server as a tor hidden service. Everything is handled by tor out of the box, .onion domain name, nat hole punching, E2EE, port scanning bots… all taken care of, no need for opening ports, static ip, dns, ddns, fail2ban, worrying that there’s a 0 day or that you misconfigured something. No one can exploit you service if nobody knows it exists.
If you can rent a vps you can use it as a relay server. You setup sshd on your home pc and ssh to the vps with the -R flag.
ssh -R 8022:localhost:22 user@relayAs long as the connection is live you can ssh to the server via relay. If you set GatewayPorts to yes on the relay in sshd_config then it will act as an open port on your home pc and anyone will be able to connect to it over the internet with
ssh -p 8022 user@relayso make sure to secure it correctly, only allow ssh keys etc. If you set GatewayPorts to no, then only clients connected to the relay will be able to connect to the server, this is a must have if you’re gonna use unsecure protocols like VNC. First ssh to the server
ssh user@relaynext
ssh user@localhost -p 8022or one line, especially useful when combined with -i to point at the home pc’s ssh key stored on the client
ssh -J user@relay user@localhost -p 8022You can also setup VNC over ssh. Add 2nd -R on home pc with vnc ports
ssh -R 5901:localhost:5901 user@relayor together
ssh -R 8022:localhost:22 -R 5901:localhost:5901 user@relayOn the client ssh with the -L flag
ssh -L 5091:localhost:5091 user@relayNow you can connect your VNC client to
localhost:1
qwerty@discuss.tchncs.deto
Lemmy Shitpost@lemmy.world•Which is worse: not wanting kids, or wanting them too much?
176·1 个月前
Love presenting politically motivated murder as a joke.
A father of two died and a family is forever destroyed. lol, amirite?
I’d say it’s more private to anonymously use google or brave through a hardened web browser with a vpn than logged in to kagi account attached to your payment method.
qwerty@discuss.tchncs.deto
Technology@lemmy.world•EU’s new social media child protection rules to require all social media accounts to produce state ID - Leaked documents suggest that some existing accounts will also be subject to identification che…English
13·1 个月前Great, this might actually kill centralized social media in a long run. Future generations will grow up on decentralized web because it will be the only one they can access.
North Koreans may have GNI per capita of $1800 compared to $61900 of South Koreans, healthcare index of 37.5 compared to 82.9, infant mortality of 22.2/1000 vs 2.9/1000, maternal mortality of 107/100k vs 8/100k, internet access below 1%, purchasing power of 18.9 vs 116.6 and 42% of them may be undernourished, but at least they get to spend their, on average, 10 years shorter life compared to South Koreans serving his Excellency, Supreme Leader Kim Jong Un.
qwerty@discuss.tchncs.deto
Linux@programming.dev•Debian developer Antoine Le Gonidec resigns after option allowing corporate LLM use without disclosure wins vote
89·2 个月前The point isn’t so much the speed and comfort of the commute itself.
The point is that a car is an inefficient power-wasting piece of trash, and the oil rigs that power it have significant negative impacts on people and the environment, all for the sake of commuters being lazy idiots. And you’d have to be an idiot to let a car take away your mobility.
qwerty@discuss.tchncs.deto
Technology@lemmy.world•Stop Killing The Internet: No Digital ID & No Age Verification | European Citizens' InitiativeEnglish
131·2 个月前We call on the European Commission to propose legislation ensuring that digital identity and age-assurance systems used to access online services in the Union remain voluntary, privacy-preserving and non-discriminatory. Citizens must not be forced to identify themselves to access lawful online content or services unless strictly necessary, proportionate and provided by law. The legislation should require anonymous or pseudonymous proof-of-age, data minimisation, selective disclosure, open-source implementation, independent security audits, prohibition of cross-service tracking by relying parties, and equivalent alternatives for citizens who do not use a digital wallet.
Yeah, nah.
qwerty@discuss.tchncs.deto
Privacy@lemmy.world•Ordinary WiFi can now identify you with near-perfect accuracyEnglish
15·2 个月前Is it time to put tinfoil in the walls?
qwerty@discuss.tchncs.deto
Lemmy Shitpost@lemmy.world•Drop your unpopular opinions here because c/unpopularopinions is filled with popular opinions
13·3 个月前What if you only eat carnivores?
qwerty@discuss.tchncs.deto
Not The Onion@lemmy.world•Canada investigating how Skyrim username mixup sent innocent man to prison for 18 monthsEnglish
22·3 个月前Alternative title: “How to become a multi millionaire in less than 2 years.”
qwerty@discuss.tchncs.deto
Technology@lemmy.world•Senators demand crackdown on wildfire “prediction market” bets | Fire experts warn such markets could incentivize arson.English
1·3 个月前Slightly off topics but this reminds me of this video making a case that forest fires are inevitable and the more often they happen the better https://youtu.be/HBluLfX2F_k?t=1448
qwerty@discuss.tchncs.deto
Not The Onion@lemmy.world•'Unlock my f---ing anime': Houston man arrested after threatening call to governor's officeEnglish
1226·3 个月前As if democrats weren’t doing the same thing. It’s a uniparty. The difference is the same as pokémon red and blue, you get to choose the color of the package and which monster you get.
qwerty@discuss.tchncs.deto
Technology@lemmy.world•Open Source isn't enought, we need governanceEnglish
21·3 个月前Isn’t this just a public company with extra steps?













If you’re behind cgnat opening ports on your router won’t do you any good. You have to call your isp and ask them for a dedicated public ip, usually for a price if they offer one at all. If that ip is static you can remember it, if not, you need ddns. If you’re one of the lucky few not behind cgnat then yeah, your setup will be the simplest possible, but if you are, like the majority of people these days, it’s one of the most complicated.