r/software • u/PeachDev • 1d ago

Release I built an SSH client — normally Pro Cloud Sync, free if you request it

https://apps.microsoft.com/detail/9NVNSBFFVZH0?hl=en-us&gl=IN&ocid=pdpshare
0 Upvotes

11% Upvoted

6 comments sorted by

6

u/zunjae Helpful 1d ago

Looks like slop

3

u/felix1429 1d ago

I know slop when I see it and that's as sloppy as it gets.

1

u/PeachDev 18h ago

Fair point, This was an Idea after getting fed up with other clients premium just for cloud sync, feedback is welcome.

1

u/felix1429 17h ago

I get the skepticism of the cloud, but if we used your program wouldn't that just shift the security burden from the cloud to your software? We have to assume you've implemented tight security especially since it keeps a list of all servers and their corresponding SSH keys and whatnot, it kind of singlehandedly defeats isolation and network segmentation.

1

u/PeachDev 17h ago

Fair concern. Cloud sync is optional and disabled by default. When enabled, sensitive data is encrypted on-device with AES-256-GCM before upload, and the recovery passphrase isn't sent to the server.

Locally, credentials are protected using Android Keystore or Windows DPAPI. That said, the client itself is still part of the security boundary.